last executing test programs: 12m19.94477671s ago: executing program 32 (id=294): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000479000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00005df000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xa, 0x20002f7}) 12m18.851578883s ago: executing program 33 (id=323): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) 12m10.692227508s ago: executing program 34 (id=543): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 10m42.760223824s ago: executing program 35 (id=2855): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 9m46.631350802s ago: executing program 36 (id=4395): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000000f) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) getdents64(r0, &(0x7f0000001000)=""/164, 0xa4) 7m34.616589432s ago: executing program 37 (id=7882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m17.815599747s ago: executing program 38 (id=8300): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) listen(0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffc, @empty, 0x80000001}, 0x1c) r3 = dup(r2) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 6m57.770804979s ago: executing program 39 (id=8728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x6e, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000021a0000121fb8cfb5499e646ce8b0cadb76047ac98341dbd12d63280621d341ffd08ad4c99bd71fe93ad289ab53d937938e2dfa20fbe16612d3c336c6a9f4e3842eb023477d5d486af0b1de01d8cfff685cacc7661268316668150b0b79b35b84b7f142fedea954871e76fce5870e1900c284e3313653d236b55eba147f15a35544591f54e02dfbe56bb79eb2c7eeef3b11ee1fb2be", 0xbe}, {&(0x7f0000000300)}], 0x2}, 0x4) 6m49.092007643s ago: executing program 40 (id=8852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 6m35.190783832s ago: executing program 41 (id=9100): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xa82, &(0x7f0000000400)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000001d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0\x00'}) io_uring_enter(r1, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 6m25.492494752s ago: executing program 42 (id=9241): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@nolazytime}, {@block_validity}]}, 0x0, 0x60c, &(0x7f0000001b40)="$eJzs3c9vFGUfAPDvTH/Svu/bQt68r3iQJsZAorS0gCHGRHonBH/8A5UWQiiUtDWxSEJJ9Gi8eDDx5EH8L5TEm/Hg1YMXT4aEGMNBDJE1s50p2+3u0l/bKd3PJ1k6z8x2nmeWfvt95ukzMwF0rJHsnzTicETcSCKGarZ1R75xZOV9D/+4dTF7JVGpvPt7ErduJ8u1+0ryr4P5N/89FMlPacShrvX1LizdvDo1Ozszn5fHFq/dGFtYunn8yrWpyzOXZ65PvD5x5vSp02fGT2zr+HoarPv6y8fJ+De/nE/ibDzJ25YdV/37+rZVc/aZjURlxaPa9dnnemab+94r/hwqfk6eSupXsGddyuP2XET8P4aiq+Z/cyg+ebvUxgFtVUmiyFFAx0maxP8Pk61+M/S3rT3Abin6AcW5faPz4PXSNvdKgN3wYHJlQGol9nsiooj/7pWxweivjqENPEzWjPMkEbG9kbkVWR0/fn/+4+wVTcbhgPZYvlOMctfn/6Qam8PRXy0NPEzXxv9ypZLmPYFs/TtbrH+kriz+Yfcs34mIF/L83xsbjv80j90i/t/fYv3iHwAAAAAAAHbOvcmIeK3R/L90df5Pb4P5P4MRcXYH6n/23//S+/lCsgPVATUeTEa82XD+7+oc3+GuvPTv6nyAnuTSldmZExHxn4g4Fj19WXm8br+1M4SPf3roi2b1187/y15Z/cVcwHxP97vrLsSdnlqc2u5xAxEP7kS8WJ3/eyRfs3b+T5b/kwb5P4vvGxus49Ardy802/bs+AfapfJVxNGG+f9pdztpfX+OsWp/YKzoFaz30keffdusfvEP5cny/0Dr+O9Lau/Xs7C5/fdGxMml7kqz7Vvt//cm73UV+898OLW4OD8e0ZucW79+YnNthv2qiIciXrL4P/Zy6/G/1f5/TRweiIjlDdb5vyeDvzbbJv9DebL4n26d/4fX5v/NL0zcHf6uWf0XNpT/T1Vz+rF8jfE/qLX+fhwbDdBSmgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7k0Iv4VSTq6upymo6MRgxHx3xhIZ+cWFl+9NPfB9elsW/X5/2nxpN+hlXJSPP9/uKY8UVc+GREHI+LzrgPV8ujFudnpsg8eAAAAAAAAAAAAAAAAAAAA9ojB6jX/lb766/8zv3WV3Tqg7brzr+IdOk/3lr+z0rejDQF23dbjH3iOZef8m4j/nna2BShB8/h/9LhStavNAXaR/j90ri3Gvz8XwD4g/0On2uCYXn+72wGUQf4HAAAAAIB95eCRez8nEbH8xoHqK9ObbzPZH/a3tOwGAKUxhxc6V/dc2S0AyuIcH0hWl/5qeLF/89n/SXsaBAAAAAAAAAAAAACsc/Sw6/+hU7W+/t/cftjPWlz/3yj43S4A9pHmj/6Q+2G/c44PPCvbu/4fAAAAAAAAAAAAAPaA/ptXp2ZnZ+YXlp6/hbf2RjM2t7A8tSeasYmFyu2I1u950p7aeyJir3wI8wtZa3arruIWHCUecsm/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFX/BAAA//8IaCJL") syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 5m31.323984824s ago: executing program 43 (id=9888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0xc}, 0x0) 2m58.119896426s ago: executing program 44 (id=13360): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x401, 0x2, 0x173, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m47.09810181s ago: executing program 45 (id=13746): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m51.47970089s ago: executing program 2 (id=15374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x7723, &(0x7f0000000340)={0x0, 0x2c1a, 0x2, 0x1, 0xa00001}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 1m50.11128945s ago: executing program 2 (id=15398): mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa1000316) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 1m50.11093534s ago: executing program 8 (id=15399): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtIxk5nEZDLHpr8fvDnve96TeZ4nJ5nzHpiTAJ5ak9mXNOJIRJxPIsbr+9OIGKj2hiLWa8c9vH91NmtJVCpv/5ZEEhEP7l+dbbxWUt+O1gdDEXH7tST+/VFr3OXVtcWZcrm0VB8fX7l45fjy6torCxdnLpQulC6dmn711PTp6eku1nr3yntfPPPDG89fv/nx1JufH/ouibMxVp9rrqNbJmNy42fSrBARM90OlpO+ej3NdSaFHBMCAKCjtGkN998Yj754vHgbj29/zDU5AAAAoCsqfREVAAAA4IBL3P8DAADAAdf4HMCD+1dnGy3fTyT01r1zETFRq7/xfHNtphDr1e1Q9EfEyO9JND/WmtS+bc8ms0hff1/KWmz3HPJwFwJusn4tIv6/1flPqvVPVJ/ibq0/jYipLsSf3DTu9e/fXuo/24X4edcPwNPp1rnahaz1+pfW1j+DtdHm619hi2vXbuR9/Wus/x62rP/SjfVfX5v131s7jHH00Uu32801r//e/eTnuSx+tt1TUX/DvWsRRwtb1Z9s1J+0qf/8DmOMzt690W4uqz+rt9F6XX/lZsSx6mqutf6GpNP/Jzo+v1AuTdW+bvH6q6c7x28+/1nL4jfuBXohO/8jsbvzf2WHMSb+9+uRdnPb15/+MpC8U+0N1Pd8OLOysnQiYiB5vXX/yc65NI5pvEZW/4vPdf7736r+7D1hvf5zyH57rtW32fj6ppijx05+tfv691dW/9wuz/+nO4zx5Tc33m83l3f9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ0ogYiyQtbvTTtFiMGI2I/8RIWr68vPLy/OUPLs1lcxET0Z/OL5RLUxExXhsn2fhEtf94fHLTeDoiDkfEZ+PD1XFx9nJ5Lu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DAaEWORpMWISCPij/E0LRbzzgoAAADouom8EwAAAAD2nft/AAAAOPha7v8LfxkN9TIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqTDz966k0TE+pnhassM1Of6c80M2G/pzg4b2e88gN7ryzsBIDeFpn6lUqnkmArQY+7xgWSb+aG2M4NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf64Xjty6k0TE+pnhassM1Of6c80M2G9p3gkAuenrNJlsuwN4ghXyTgDIjXt8oLayf1SpaZ0favudg3uOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTY6zakrQYEWm1n6bFYsS/ImIi+pP5hXJpKiIORcRP4/2D2fhE3kkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdcura4sz5XJpSUdHp4ud4ehZrOH6H3ObYwbbT3Xo5PzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALpZX1xZnyuXS0nLemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5W15dW5wpl0tL+9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzZwAAAP//0L4Jug==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m49.839684526s ago: executing program 2 (id=15405): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x80003}, 0x100002, 0x0, 0xffffffff, 0x3, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000fffb00000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 1m49.787093121s ago: executing program 2 (id=15417): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) 1m49.746976885s ago: executing program 0 (id=15407): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m49.746229775s ago: executing program 2 (id=15419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1m49.715143048s ago: executing program 0 (id=15408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x60}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m49.636250956s ago: executing program 8 (id=15410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m49.626359406s ago: executing program 0 (id=15423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 1m49.597395379s ago: executing program 0 (id=15412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m49.312965386s ago: executing program 0 (id=15415): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r4 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 1m49.309046167s ago: executing program 8 (id=15416): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff01000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000ee0700010001000000080001000100000008000100020000000400030018000180140002006c6f"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m49.231160604s ago: executing program 8 (id=15420): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1m49.123718795s ago: executing program 8 (id=15433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)='//sys\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x92ync_\x93\x96\xff\x92\xaf\x00\x04\x00\xf44.\x00'/46}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m49.084798728s ago: executing program 8 (id=15424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x18000, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64=r2], 0x8, 0x2eb, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1m48.940652702s ago: executing program 7 (id=15427): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x10007ffffffff}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1m48.819520583s ago: executing program 2 (id=15428): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m48.793870766s ago: executing program 7 (id=15429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 1m48.790823016s ago: executing program 0 (id=15431): r0 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa97) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 1m48.773696948s ago: executing program 7 (id=15432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e2b, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r3, 0x3}, 0x8) 1m48.756259279s ago: executing program 7 (id=15434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3a, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m48.711881554s ago: executing program 7 (id=15435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) 1m48.640512451s ago: executing program 7 (id=15437): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2, 0x4], 0x0, 0x2, 0x1}}, 0x40) 1m15.757064876s ago: executing program 46 (id=15436): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x12, 0x2}, 0x20) 1m15.746206137s ago: executing program 47 (id=15437): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2, 0x4], 0x0, 0x2, 0x1}}, 0x40) 1m15.716847149s ago: executing program 48 (id=15428): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m15.687898092s ago: executing program 49 (id=15424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x18000, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRES64=r2], 0x8, 0x2eb, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1m15.665168644s ago: executing program 50 (id=15431): r0 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa97) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 1m3.817350777s ago: executing program 3 (id=15640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m3.655588933s ago: executing program 3 (id=15643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010b00000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 1m3.569889731s ago: executing program 3 (id=15645): r0 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x0, 0x2000005, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0||6') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@usrquota}, {@sysvgroups}, {@nodiscard}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="25e200ea3f5b3179d7b52eb343fc", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x7e) 1m3.394350278s ago: executing program 3 (id=15650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x558, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) creat(&(0x7f0000000300)='./bus\x00', 0x0) socket(0x10, 0x3, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) fadvise64(r0, 0x14, 0x0, 0x4) 1m3.068323609s ago: executing program 3 (id=15657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1m2.354107487s ago: executing program 3 (id=15667): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x22020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r1, 0x0, 0x0) 1m2.353913797s ago: executing program 51 (id=15667): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x22020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r1, 0x0, 0x0) 2.437666427s ago: executing program 5 (id=16894): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.30335661s ago: executing program 5 (id=16899): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 1.430310443s ago: executing program 5 (id=16931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x8004) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) 1.280703118s ago: executing program 5 (id=16932): socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3d}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d942cf39c8879fce72ab134384d378092e66", 0x12, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f00000003c0)='(', 0x1, 0x24004090, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.198965096s ago: executing program 5 (id=16935): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 908.676943ms ago: executing program 6 (id=16937): open(&(0x7f00000001c0)='./file0\x00', 0x840, 0x16) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) 908.275823ms ago: executing program 5 (id=16938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 749.339239ms ago: executing program 6 (id=16939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 647.319609ms ago: executing program 6 (id=16942): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="00fdc1d76d0dbdbc52faafcc3a61e50e11bde4a2d8ba54a9467b96c0890f391113ac265c2e46bb73627cda74d725c6ca545185eca64f627e00b44ef95f2a7a7060f9b2c7a8dddc278dd01dc5a9307e1784c9bc0fdbbf9520c3d9e0b0c5c96b0cb1c1d311e0b08b404b58f64ac3ee", 0x6e}], 0x1, 0x0) 568.311826ms ago: executing program 6 (id=16945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 485.091244ms ago: executing program 6 (id=16947): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 431.107169ms ago: executing program 4 (id=16949): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 430.465859ms ago: executing program 6 (id=16950): getpid() r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 388.153733ms ago: executing program 4 (id=16951): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x800, 0x2, 0x4000157}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) 328.718429ms ago: executing program 4 (id=16954): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r4}, 0x18) 328.502829ms ago: executing program 1 (id=16955): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) kexec_load(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 328.312359ms ago: executing program 1 (id=16956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x43b4a43143cbebb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 328.088079ms ago: executing program 4 (id=16957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48891}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 325.019679ms ago: executing program 1 (id=16958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400020008000700"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 317.151ms ago: executing program 4 (id=16960): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 244.696507ms ago: executing program 4 (id=16961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 244.398277ms ago: executing program 9 (id=16962): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 244.178977ms ago: executing program 1 (id=16963): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4a38, 0x200) ioctl$SG_IO(r0, 0x2285, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) rseq(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x0, 0x0) 244.039197ms ago: executing program 1 (id=16964): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0x18) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 217.09093ms ago: executing program 9 (id=16965): socket(0x11, 0xa, 0x8) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08"], 0x0) 160.623235ms ago: executing program 9 (id=16966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "794d63e80c0164a6", "35cf3e2c384b547c810772410a076670", "454f7b98", "fc562e29899b57cc"}, 0x28) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0'}, 0xb) 84.634282ms ago: executing program 9 (id=16967): r0 = getgid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r0}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") 57.982285ms ago: executing program 9 (id=16968): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x9000}], 0x1, 0x7000, 0x7, 0x1e) 39.486607ms ago: executing program 9 (id=16969): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0xa, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x18) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 1 (id=16970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) kernel console output (not intermixed with test programs): subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.6.15540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b679f749 code=0x7ffc0000 [ 712.748048][T14399] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.762473][T14399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.774274][T14399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.790317][T14399] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.847627][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15549'. [ 712.912804][T16010] loop6: detected capacity change from 0 to 2048 [ 712.951755][T16010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.080123][T15560] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 713.118561][T15560] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 713.148909][T15560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.512287][T16042] loop6: detected capacity change from 0 to 2048 [ 713.540002][T16042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.667799][T16041] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 713.682818][T16041] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 2 with error 28 [ 713.695699][T16041] EXT4-fs (loop6): This should not happen!! Data will be lost [ 713.695699][T16041] [ 713.705908][T16041] EXT4-fs (loop6): Total free blocks count 0 [ 713.711959][T16041] EXT4-fs (loop6): Free/Dirty block details [ 713.717885][T16041] EXT4-fs (loop6): free_blocks=2415919504 [ 713.723688][T16041] EXT4-fs (loop6): dirty_blocks=16 [ 713.728916][T16041] EXT4-fs (loop6): Block reservation details [ 713.735044][T16041] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 713.780180][T15560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.967259][T16068] lo speed is unknown, defaulting to 1000 [ 714.006909][T16068] lo speed is unknown, defaulting to 1000 [ 714.289996][T16094] pim6reg: entered allmulticast mode [ 714.299766][T16094] pim6reg: left allmulticast mode [ 714.389838][T16101] IPv4: Oversized IP packet from 127.202.26.0 [ 714.439598][T16105] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15588'. [ 714.455192][T16107] sd 0:0:1:0: device reset [ 714.490604][T16107] siw: device registration error -23 [ 714.560675][T16114] validate_nla: 1 callbacks suppressed [ 714.560692][T16114] netlink: 'syz.5.15591': attribute type 13 has an invalid length. [ 714.622300][T16116] loop1: detected capacity change from 0 to 512 [ 714.639992][T16116] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 714.662069][T16116] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 714.679942][T16116] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.15593: bg 0: block 248: padding at end of block bitmap is not set [ 714.696251][T16116] __quota_error: 74 callbacks suppressed [ 714.696271][T16116] Quota error (device loop1): write_blk: dquota write failed [ 714.709447][T16116] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 714.745138][T16116] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.15593: Failed to acquire dquot type 1 [ 714.787495][T16116] EXT4-fs (loop1): 1 truncate cleaned up [ 714.794598][T16116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 714.798227][ T29] audit: type=1326 audit(1766364131.271:35763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.842290][ T29] audit: type=1326 audit(1766364131.301:35764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.866299][ T29] audit: type=1326 audit(1766364131.301:35765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.890157][ T29] audit: type=1326 audit(1766364131.301:35766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.914381][ T29] audit: type=1326 audit(1766364131.301:35767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.938444][ T29] audit: type=1326 audit(1766364131.301:35768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.962139][ T29] audit: type=1326 audit(1766364131.311:35769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 714.986507][ T29] audit: type=1326 audit(1766364131.311:35770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.3.15595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd663f749 code=0x7ffc0000 [ 715.073250][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 715.083435][ T8993] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 715.256930][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15607'. [ 715.285868][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15608'. [ 715.349455][T16161] loop1: detected capacity change from 0 to 1024 [ 715.357383][T16161] EXT4-fs: Ignoring removed bh option [ 715.373968][T16161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.409408][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.746223][T16182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 715.810993][T16189] loop1: detected capacity change from 0 to 732 [ 715.817706][T16189] iso9660: Unknown parameter ' ' [ 716.057001][T16208] netlink: 'syz.1.15633': attribute type 13 has an invalid length. [ 716.196791][T16216] loop3: detected capacity change from 0 to 1024 [ 716.237504][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.244919][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.263934][T16216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 716.293714][T16216] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.314097][T16216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15636: bg 0: block 112: padding at end of block bitmap is not set [ 716.355832][T16208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.369277][T15561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 716.385747][T16208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.436900][T14336] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.446190][T16230] smc: net device hsr0 applied user defined pnetid SYZ2 [ 716.454198][T14336] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.472580][T16230] smc: net device hsr0 erased user defined pnetid SYZ2 [ 716.480341][T14336] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.488798][T14336] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.641273][T16242] loop3: detected capacity change from 0 to 1024 [ 716.742015][T16242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.754821][T16245] loop6: detected capacity change from 0 to 2048 [ 716.792791][T15561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.834285][T16257] loop3: detected capacity change from 0 to 1024 [ 716.867589][T16245] Alternate GPT is invalid, using primary GPT. [ 716.874237][T16245] loop6: p2 p3 p7 [ 716.883252][T16257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.930388][T16257] loop3: detected capacity change from 1024 to 0 [ 716.937866][T16257] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.3.15650: unable to read itable block [ 716.957018][T16257] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 716.971428][T16257] EXT4-fs (loop3): I/O error while writing superblock [ 716.978791][T16257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 717.036786][T16257] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.045923][T16257] EXT4-fs (loop3): I/O error while writing superblock [ 717.053152][T16257] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm syz.3.15650: mark_inode_dirty error [ 717.065057][T16257] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.073704][T16257] EXT4-fs (loop3): I/O error while writing superblock [ 717.080616][T16257] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 5 [ 717.092721][T16257] EXT4-fs (loop3): This should not happen!! Data will be lost [ 717.092721][T16257] [ 717.117636][T15561] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #2: block 5: comm syz-executor: unable to read itable block [ 717.131058][T15561] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.139360][T15561] EXT4-fs (loop3): I/O error while writing superblock [ 717.146268][T15561] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 717.156921][T15561] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.208220][T15561] EXT4-fs (loop3): I/O error while writing superblock [ 717.215279][T15561] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 717.252881][T16273] loop5: detected capacity change from 0 to 4096 [ 717.268113][T15561] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.278985][T16273] EXT4-fs: Ignoring removed mblk_io_submit option [ 717.285591][T16273] EXT4-fs: test_dummy_encryption option not supported [ 717.303387][T15561] EXT4-fs (loop3): I/O error while writing superblock [ 717.344269][T14354] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4953: inode #18: block 9: comm kworker/u8:37: unable to read itable block [ 717.374340][T14354] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.390425][T14354] EXT4-fs (loop3): I/O error while writing superblock [ 717.403227][T14354] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:37: unable to read itable block [ 717.437851][T14354] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.447526][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15659'. [ 717.456785][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15659'. [ 717.478215][T16271] loop6: detected capacity change from 0 to 32768 [ 717.493202][T15561] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 717.511358][T16262] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 717.525273][T16271] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 717.531961][T16271] loop6: p1 start 460800 is beyond EOD, truncated [ 717.538496][T16271] loop6: p2 size 83886080 extends beyond EOD, truncated [ 717.562328][T16271] loop6: p5 start 460800 is beyond EOD, truncated [ 717.568846][T16271] loop6: p6 size 83886080 extends beyond EOD, truncated [ 717.818080][T16283] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 717.859489][T16283] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 718.058037][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15675'. [ 718.071527][T16294] lo speed is unknown, defaulting to 1000 [ 718.079132][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 718.134092][T16294] lo speed is unknown, defaulting to 1000 [ 718.219147][T16294] chnl_net:caif_netlink_parms(): no params data found [ 718.240040][T16328] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15680'. [ 718.396422][T16294] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.403553][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.452336][T16294] bridge_slave_0: entered allmulticast mode [ 718.459000][T16294] bridge_slave_0: entered promiscuous mode [ 718.471363][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.478479][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.489068][T16294] bridge_slave_1: entered allmulticast mode [ 718.496805][T16294] bridge_slave_1: entered promiscuous mode [ 718.518727][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.539945][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.575234][T16294] team0: Port device team_slave_0 added [ 718.584511][T16294] team0: Port device team_slave_1 added [ 718.621591][T16294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.628711][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.655051][T16294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.724202][T16294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.731438][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.757820][T16294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.834312][T16294] hsr_slave_0: entered promiscuous mode [ 718.843062][T16294] hsr_slave_1: entered promiscuous mode [ 718.850120][T16294] debugfs: 'hsr0' already exists in 'hsr' [ 718.856000][T16294] Cannot create hsr debugfs directory [ 718.974683][T16363] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15691'. [ 719.019205][T16363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.030454][T16363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.042632][T16363] bond0 (unregistering): Released all slaves [ 719.279933][T16294] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 719.309509][T16294] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 719.323632][T16294] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 719.342844][T16294] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 719.422566][T16294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.436565][T16294] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.448432][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.455594][T14374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.496686][T14336] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.504283][T14336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.670425][T16294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.777845][T16398] lo speed is unknown, defaulting to 1000 [ 719.839400][T16398] lo speed is unknown, defaulting to 1000 [ 719.948616][T16294] veth0_vlan: entered promiscuous mode [ 719.967596][T16294] veth1_vlan: entered promiscuous mode [ 720.011520][T16294] veth0_macvtap: entered promiscuous mode [ 720.017311][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 720.017330][ T29] audit: type=1326 audit(1766364136.491:36260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.047803][ T29] audit: type=1326 audit(1766364136.491:36261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.071757][ T29] audit: type=1326 audit(1766364136.491:36262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.095617][ T29] audit: type=1326 audit(1766364136.491:36263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.119485][ T29] audit: type=1326 audit(1766364136.491:36264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.143399][ T29] audit: type=1326 audit(1766364136.491:36265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.167265][ T29] audit: type=1326 audit(1766364136.491:36266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.191102][ T29] audit: type=1326 audit(1766364136.491:36267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.215170][ T29] audit: type=1326 audit(1766364136.491:36268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.239154][ T29] audit: type=1326 audit(1766364136.491:36269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.1.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa766fcf749 code=0x7ffc0000 [ 720.268396][T16426] batadv1: entered promiscuous mode [ 720.274014][T16426] batadv1: entered allmulticast mode [ 720.294244][T16294] veth1_macvtap: entered promiscuous mode [ 720.308486][T16294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.323718][T16294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.335210][T16425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16425 comm=syz.1.15708 [ 720.356811][T14344] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.387677][T14344] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.401446][T14344] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.416077][T14344] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.838539][T16468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15726'. [ 720.851906][T16470] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 721.410641][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.419859][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.439455][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.448915][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.498643][T16514] netlink: 'syz.9.15745': attribute type 3 has an invalid length. [ 721.506727][T16514] netlink: 'syz.9.15745': attribute type 1 has an invalid length. [ 721.514793][T16514] netlink: 181400 bytes leftover after parsing attributes in process `syz.9.15745'. [ 721.514888][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.533532][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15744'. [ 721.728186][T16525] blktrace: Concurrent blktraces are not allowed on loop11 [ 721.870360][T16537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15753'. [ 722.021933][T16544] set_capacity_and_notify: 1 callbacks suppressed [ 722.021954][T16544] loop5: detected capacity change from 0 to 1024 [ 722.061798][T16544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.315948][T16576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15768'. [ 722.349884][T16578] bridge0: port 3(gretap0) entered blocking state [ 722.356552][T16578] bridge0: port 3(gretap0) entered disabled state [ 722.363658][T16578] gretap0: entered allmulticast mode [ 722.370407][T16578] gretap0: entered promiscuous mode [ 722.381418][T16578] gretap0: left allmulticast mode [ 722.386534][T16578] gretap0: left promiscuous mode [ 722.391736][T16578] bridge0: port 3(gretap0) entered disabled state [ 722.502715][T16586] loop1: detected capacity change from 0 to 1764 [ 722.578730][T16600] pimreg: entered allmulticast mode [ 722.625151][T16611] loop1: detected capacity change from 0 to 1024 [ 722.641846][T16611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.670695][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.680386][T16617] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 722.688122][T16617] vhci_hcd vhci_hcd.2: invalid port number 96 [ 722.694341][T16617] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 722.831164][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.899004][T16637] loop6: detected capacity change from 0 to 512 [ 722.906069][T16637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 722.932478][T16637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.945271][T16637] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.949992][T16641] loop5: detected capacity change from 0 to 512 [ 722.962843][T16641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 722.984426][T16641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.002891][T16641] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 723.016359][T15560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.128060][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.151166][T16657] netlink: 'syz.5.15799': attribute type 10 has an invalid length. [ 723.162222][T16657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.170913][T16657] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 723.482732][T16686] veth4: entered promiscuous mode [ 723.487881][T16686] veth4: entered allmulticast mode [ 723.520400][T16692] tipc: Started in network mode [ 723.525367][T16692] tipc: Node identity ac14140f, cluster identity 4711 [ 723.534435][T16692] tipc: New replicast peer: 255.255.255.255 [ 723.540680][T16692] tipc: Enabled bearer , priority 10 [ 723.593857][T16699] netlink: 'syz.9.15817': attribute type 10 has an invalid length. [ 723.603242][T16697] loop6: detected capacity change from 0 to 512 [ 723.615329][T16699] team0: Port device geneve1 added [ 723.641344][T16697] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 723.683360][T16697] EXT4-fs (loop6): mount failed [ 723.777246][T16719] loop6: detected capacity change from 0 to 4096 [ 723.786568][T16719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.804012][T16719] EXT4-fs (loop6): shut down requested (2) [ 723.819314][T15560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.848527][T16727] loop6: detected capacity change from 0 to 1024 [ 723.857109][T16727] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 723.868635][T16727] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 723.877670][T16727] EXT4-fs (loop6): orphan cleanup on readonly fs [ 723.885097][T16727] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.15827: Failed to acquire dquot type 0 [ 723.896880][T16727] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.15827: Failed to acquire dquot type 0 [ 723.908790][T16727] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.15827: Freeing blocks not in datazone - block = 0, count = 4096 [ 723.922852][T16727] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.15827: Failed to acquire dquot type 0 [ 723.934801][T16727] EXT4-fs (loop6): 1 orphan inode deleted [ 723.944186][T16727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.960412][T16727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.993198][T16732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.000603][T16732] IPv6: NLM_F_CREATE should be set when creating new route [ 724.230583][T16748] loop5: detected capacity change from 0 to 4096 [ 724.237533][T16748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.247003][T16748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.455157][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.536278][T16755] program syz.5.15835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 724.660262][ T3501] tipc: Node number set to 2886997007 [ 724.901348][T16792] loop5: detected capacity change from 0 to 512 [ 724.909273][T16792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 724.933512][T16792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.946856][T16792] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 725.001448][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.264229][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.264229][T14353] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 725.277934][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.277934][T14353] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 725.291757][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.291757][T14353] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 725.305430][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.305430][T14353] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 725.319270][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.319270][T14353] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 725.334545][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.334545][T14353] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 725.348331][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.348331][T14353] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 725.362316][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.362316][T14353] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 725.376504][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.376504][T14353] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 725.390790][T14353] kworker/u8:36: attempt to access beyond end of device [ 725.390790][T14353] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 725.421522][T16820] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 725.429862][T16818] SELinux: ebitmap: truncated map [ 725.432472][T16820] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 725.438317][T16818] SELinux: failed to load policy [ 725.448296][T16820] JBD2: no valid journal superblock found [ 725.458232][T16820] EXT4-fs (loop5): Could not load journal inode [ 725.745046][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 725.745063][ T29] audit: type=1326 audit(1766364142.221:36296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.786918][ T29] audit: type=1326 audit(1766364142.261:36297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.811128][ T29] audit: type=1326 audit(1766364142.261:36298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.835104][ T29] audit: type=1326 audit(1766364142.261:36299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.859184][ T29] audit: type=1326 audit(1766364142.261:36300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.883316][ T29] audit: type=1326 audit(1766364142.261:36301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.907139][ T29] audit: type=1326 audit(1766364142.261:36302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.931208][ T29] audit: type=1326 audit(1766364142.261:36303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.955415][ T29] audit: type=1326 audit(1766364142.261:36304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 725.979242][ T29] audit: type=1326 audit(1766364142.261:36305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.9.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 726.107861][T16864] rdma_op ffff888119ff7d80 conn xmit_rdma 0000000000000000 [ 726.533735][T16897] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.573502][T16906] IPv4: Oversized IP packet from 127.202.26.0 [ 726.593397][T16897] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.611182][T16912] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 726.657448][T16897] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.692756][T16920] netlink: 'syz.6.15907': attribute type 13 has an invalid length. [ 726.774324][T16922] journal_path: Lookup failure for './file0' [ 726.780906][T16922] EXT4-fs: error: could not find journal device path [ 726.847891][T16927] IPv6: Can't replace route, no match found [ 727.084820][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.092092][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.321801][T16920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.333596][T16920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.397676][T16897] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.413074][T14384] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.439952][T14384] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.455530][T14384] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.569900][T14384] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.604096][T14336] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.630752][T14336] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.639594][T14336] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.670342][T14336] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.699909][T16934] lo speed is unknown, defaulting to 1000 [ 727.743253][T16964] netlink: 'syz.9.15926': attribute type 1 has an invalid length. [ 727.760420][T16967] __nla_validate_parse: 5 callbacks suppressed [ 727.760437][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15925'. [ 727.857629][T16934] lo speed is unknown, defaulting to 1000 [ 728.104718][T16991] syzkaller0: entered promiscuous mode [ 728.110351][T16991] syzkaller0: entered allmulticast mode [ 728.256184][T17000] set_capacity_and_notify: 3 callbacks suppressed [ 728.256210][T17000] loop1: detected capacity change from 0 to 512 [ 728.272019][T17000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 728.294789][T17000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.307722][T17000] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 728.324894][T17008] pimreg: entered allmulticast mode [ 728.377141][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.402229][T17016] loop1: detected capacity change from 0 to 1024 [ 728.409410][T17016] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 728.420376][T17016] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 728.445308][T17016] JBD2: no valid journal superblock found [ 728.451304][T17016] EXT4-fs (loop1): Could not load journal inode [ 729.205472][T17039] loop1: detected capacity change from 0 to 512 [ 729.241326][T17039] journal_path: Lookup failure for './file0' [ 729.247394][T17039] EXT4-fs: error: could not find journal device path [ 729.521471][T17068] loop4: detected capacity change from 0 to 512 [ 729.550569][T17068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.682646][T17068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.730814][T17068] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.884313][T15696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.206774][T17084] loop4: detected capacity change from 0 to 512 [ 730.215006][T17084] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 730.223930][T17086] lo: Caught tx_queue_len zero misconfig [ 730.256190][T17084] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 730.272536][T17084] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.15971: bg 0: block 248: padding at end of block bitmap is not set [ 730.300743][T17084] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.15971: Failed to acquire dquot type 1 [ 730.314587][T17084] EXT4-fs (loop4): 1 truncate cleaned up [ 730.329022][T17084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 730.459951][T17104] rdma_op ffff888126f17d80 conn xmit_rdma 0000000000000000 [ 731.045734][T15696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 731.552799][T17109] netlink: 'syz.4.15977': attribute type 10 has an invalid length. [ 731.563861][T17109] ipvlan0: entered allmulticast mode [ 731.569282][T17109] veth0_vlan: entered allmulticast mode [ 731.579434][T17109] team0: Device ipvlan0 failed to register rx_handler [ 731.671849][T17125] loop1: detected capacity change from 0 to 1024 [ 731.678589][T17125] EXT4-fs: Ignoring removed orlov option [ 731.714774][T17125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.824231][T17135] loop5: detected capacity change from 0 to 512 [ 731.890678][T17135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 731.903610][T13031] Process accounting resumed [ 731.972750][T17135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.189331][T17135] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.373014][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.549711][T17147] netlink: 'syz.4.15992': attribute type 1 has an invalid length. [ 732.564221][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.655011][T17147] bond0: (slave veth3): Enslaving as an active interface with a down link [ 732.695041][T17151] bond0: (slave dummy0): making interface the new active one [ 732.732955][T17151] dummy0: entered promiscuous mode [ 732.760504][T17151] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 732.801548][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.814758][T17147] bond0 (unregistering): (slave veth3): Releasing active interface [ 732.870911][T17147] bond0 (unregistering): (slave dummy0): Releasing active interface [ 732.914590][T17147] bond0 (unregistering): Released all slaves [ 732.948456][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15997'. [ 732.971145][T17162] bridge_slave_1: left allmulticast mode [ 732.976867][T17162] bridge_slave_1: left promiscuous mode [ 732.982693][T17162] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.008578][T17162] bridge_slave_0: left allmulticast mode [ 733.014408][T17162] bridge_slave_0: left promiscuous mode [ 733.020121][T17162] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.081553][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 733.081571][ T29] audit: type=1326 audit(1766364149.561:36364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.121704][ T29] audit: type=1326 audit(1766364149.561:36365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.145502][ T29] audit: type=1326 audit(1766364149.561:36366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.169484][ T29] audit: type=1326 audit(1766364149.561:36367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.193350][ T29] audit: type=1326 audit(1766364149.561:36368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.217720][ T29] audit: type=1326 audit(1766364149.561:36369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.241991][ T29] audit: type=1326 audit(1766364149.561:36370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.265892][ T29] audit: type=1326 audit(1766364149.561:36371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.289671][ T29] audit: type=1326 audit(1766364149.561:36372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.313851][ T29] audit: type=1326 audit(1766364149.561:36373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 733.386572][T17180] loop4: detected capacity change from 0 to 2048 [ 733.397582][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16005'. [ 733.522146][T17180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.622420][ T3478] Process accounting resumed [ 733.688637][T17179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 733.704286][T17179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 10 with error 28 [ 733.716892][T17179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 733.716892][T17179] [ 733.726911][T17179] EXT4-fs (loop4): Total free blocks count 0 [ 733.732964][T17179] EXT4-fs (loop4): Free/Dirty block details [ 733.739033][T17179] EXT4-fs (loop4): free_blocks=2415919504 [ 733.744829][T17179] EXT4-fs (loop4): dirty_blocks=16 [ 733.750053][T17179] EXT4-fs (loop4): Block reservation details [ 733.756532][T17179] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 733.896689][T17198] 9p: Bad value for 'rfdno' [ 733.903887][T15696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.119519][T17208] netlink: 'syz.5.16012': attribute type 1 has an invalid length. [ 734.196809][T17208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.265188][T17216] bond1: (slave veth7): Enslaving as an active interface with a down link [ 734.342008][ T3478] IPVS: starting estimator thread 0... [ 734.385888][T17208] bond1: (slave dummy0): making interface the new active one [ 734.448195][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16022'. [ 734.460775][T17224] IPVS: using max 2448 ests per chain, 122400 per kthread [ 734.505528][T17208] dummy0: entered promiscuous mode [ 734.530295][T17208] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 734.604045][T17216] bond1 (unregistering): (slave veth7): Releasing active interface [ 734.624877][T17216] bond1 (unregistering): (slave dummy0): Releasing active interface [ 734.680678][T17216] bond1 (unregistering): Released all slaves [ 734.873683][T17238] veth2: entered promiscuous mode [ 734.878990][T17238] veth2: entered allmulticast mode [ 735.048643][ T330] IPVS: starting estimator thread 0... [ 735.123463][T17259] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 735.150415][T17255] IPVS: using max 2544 ests per chain, 127200 per kthread [ 735.394261][T17269] loop5: detected capacity change from 0 to 2048 [ 735.407790][T17273] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 735.423469][T17269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.567621][T17268] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 735.610785][T17280] netlink: 'syz.6.16040': attribute type 1 has an invalid length. [ 735.610808][T17268] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 735.631057][T17268] EXT4-fs (loop5): This should not happen!! Data will be lost [ 735.631057][T17268] [ 735.640801][T17268] EXT4-fs (loop5): Total free blocks count 0 [ 735.645335][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16039'. [ 735.646806][T17268] EXT4-fs (loop5): Free/Dirty block details [ 735.646824][T17268] EXT4-fs (loop5): free_blocks=2415919504 [ 735.667747][T17268] EXT4-fs (loop5): dirty_blocks=32 [ 735.672918][T17268] EXT4-fs (loop5): Block reservation details [ 735.679170][T17268] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 735.697138][T17280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.727788][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.763059][T17283] bond1: (slave veth3): Enslaving as an active interface with a down link [ 735.831306][T17280] bond1: (slave dummy0): making interface the new active one [ 735.844303][T17280] dummy0: entered promiscuous mode [ 735.901476][T17280] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 735.987406][T17288] bond1 (unregistering): (slave veth3): Releasing active interface [ 736.053726][T17288] bond1 (unregistering): (slave dummy0): Releasing active interface [ 736.095845][T17288] bond1 (unregistering): Released all slaves [ 736.157761][T17287] lo speed is unknown, defaulting to 1000 [ 736.195500][T17287] lo speed is unknown, defaulting to 1000 [ 736.336270][T17315] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 736.346626][T17308] loop4: detected capacity change from 0 to 8192 [ 736.499261][T17324] loop1: detected capacity change from 0 to 2048 [ 736.512196][T17324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.644366][T17323] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 736.660727][T17323] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 8 with error 28 [ 736.673499][T17323] EXT4-fs (loop1): This should not happen!! Data will be lost [ 736.673499][T17323] [ 736.683274][T17323] EXT4-fs (loop1): Total free blocks count 0 [ 736.689283][T17323] EXT4-fs (loop1): Free/Dirty block details [ 736.695233][T17323] EXT4-fs (loop1): free_blocks=2415919504 [ 736.701020][T17323] EXT4-fs (loop1): dirty_blocks=16 [ 736.706169][T17323] EXT4-fs (loop1): Block reservation details [ 736.712370][T17323] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 736.731117][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.743388][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16056'. [ 736.775866][T17331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16055'. [ 736.818315][T17333] netlink: 'syz.4.16058': attribute type 13 has an invalid length. [ 736.942693][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16071'. [ 737.006771][T17342] netlink: 'syz.1.16060': attribute type 1 has an invalid length. [ 737.019049][T17344] netlink: 'syz.5.16073': attribute type 1 has an invalid length. [ 737.022400][T17342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.027139][T17344] netlink: 'syz.5.16073': attribute type 2 has an invalid length. [ 737.056415][T17342] bond1: (slave veth5): Enslaving as an active interface with a down link [ 737.076338][T17342] bond1: (slave dummy0): making interface the new active one [ 737.085472][T17342] dummy0: entered promiscuous mode [ 737.090899][T17342] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 737.091022][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16073'. [ 737.112688][T17342] bond1 (unregistering): (slave veth5): Releasing active interface [ 737.123418][T17342] bond1 (unregistering): (slave dummy0): Releasing active interface [ 737.133584][T17342] bond1 (unregistering): Released all slaves [ 737.521521][T17370] netlink: 68 bytes leftover after parsing attributes in process `syz.9.16072'. [ 737.522942][T17371] netlink: 'syz.1.16083': attribute type 1 has an invalid length. [ 737.547882][T17371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.596501][T17374] netlink: 'syz.9.16074': attribute type 13 has an invalid length. [ 737.735561][T17371] bond1: (slave veth7): Enslaving as an active interface with a down link [ 737.818122][T17371] bond1: (slave dummy0): making interface the new active one [ 737.842097][T17371] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 737.868470][T17375] bond1 (unregistering): (slave veth7): Releasing active interface [ 737.900940][T17375] bond1 (unregistering): (slave dummy0): Releasing active interface [ 737.911053][T17375] bond1 (unregistering): Released all slaves [ 738.158340][T17382] loop1: detected capacity change from 0 to 8192 [ 738.231867][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 738.231886][ T29] audit: type=1326 audit(1766364154.711:36956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.265023][ T29] audit: type=1326 audit(1766364154.741:36957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.289240][ T29] audit: type=1326 audit(1766364154.741:36958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.313078][ T29] audit: type=1326 audit(1766364154.741:36959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.337514][ T29] audit: type=1326 audit(1766364154.741:36960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.361504][ T29] audit: type=1326 audit(1766364154.741:36961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.385456][ T29] audit: type=1326 audit(1766364154.741:36962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.409922][ T29] audit: type=1326 audit(1766364154.741:36963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.433637][ T29] audit: type=1326 audit(1766364154.741:36964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.457681][ T29] audit: type=1326 audit(1766364154.741:36965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.9.16078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 738.607167][T17411] loop5: detected capacity change from 0 to 2048 [ 738.665317][T17411] Alternate GPT is invalid, using primary GPT. [ 738.671890][T17411] loop5: p2 p3 p7 [ 738.806825][T17419] netlink: 'syz.5.16089': attribute type 1 has an invalid length. [ 738.859950][T17419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.893357][T17419] bond1: (slave veth9): Enslaving as an active interface with a down link [ 738.914449][T17419] bond1: (slave dummy0): making interface the new active one [ 738.924113][T17419] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 738.948132][T17419] bond1 (unregistering): (slave veth9): Releasing active interface [ 738.963650][T17419] bond1 (unregistering): (slave dummy0): Releasing active interface [ 738.977608][T17419] bond1 (unregistering): Released all slaves [ 738.987530][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16105'. [ 739.001705][T17428] loop4: detected capacity change from 0 to 512 [ 739.015510][T17428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.028290][T17428] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.089696][T15696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.092025][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16095'. [ 739.145940][T17439] netlink: 'syz.9.16099': attribute type 1 has an invalid length. [ 739.170687][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16095'. [ 739.225176][T17451] loop5: detected capacity change from 0 to 512 [ 739.232004][T17451] EXT4-fs: Ignoring removed nobh option [ 739.243480][T17451] EXT4-fs (loop5): failed to initialize system zone (-117) [ 739.252949][T17456] netlink: 'syz.9.16106': attribute type 7 has an invalid length. [ 739.260990][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16106'. [ 739.270153][T17451] EXT4-fs (loop5): mount failed [ 739.279050][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16108'. [ 739.288129][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16108'. [ 739.356755][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16112'. [ 739.378303][T17472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.386397][T17472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.225235][T17509] bridge_slave_0: left allmulticast mode [ 740.231017][T17509] bridge_slave_0: left promiscuous mode [ 740.236678][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.272368][T17509] bridge_slave_1: left allmulticast mode [ 740.278141][T17509] bridge_slave_1: left promiscuous mode [ 740.284140][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.331668][T17509] bond0: (slave bond_slave_0): Releasing backup interface [ 740.342245][T17509] bond0: (slave bond_slave_1): Releasing backup interface [ 740.363451][T17509] team0: Port device team_slave_0 removed [ 740.372973][T17509] team0: Port device team_slave_1 removed [ 740.380118][T17509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.387609][T17509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.422179][T17509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.429667][T17509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.453586][T17509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.624452][T17530] netlink: 96 bytes leftover after parsing attributes in process `syz.6.16139'. [ 740.679466][T17535] team0 (unregistering): Port device team_slave_0 removed [ 740.690152][T17535] team0 (unregistering): Port device team_slave_1 removed [ 740.878500][T17558] loop1: detected capacity change from 0 to 512 [ 740.887023][T17558] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.16151: inode has both inline data and extents flags [ 740.901937][T17558] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.16151: couldn't read orphan inode 15 (err -117) [ 740.914755][T17558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.961849][T17563] sd 0:0:1:0: device reset [ 741.080423][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.358105][T17592] geneve2: entered promiscuous mode [ 741.363534][T17592] geneve2: entered allmulticast mode [ 741.522076][T17606] ªªªªª: renamed from vlan0 (while UP) [ 741.537460][T17602] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.16166'. [ 741.547399][T17602] netlink: zone id is out of range [ 741.552827][T17602] netlink: zone id is out of range [ 741.570643][T17602] netlink: zone id is out of range [ 741.576032][T17602] netlink: zone id is out of range [ 741.581385][T17602] netlink: zone id is out of range [ 741.586520][T17602] netlink: zone id is out of range [ 741.591905][T17602] netlink: zone id is out of range [ 741.597233][T17602] netlink: zone id is out of range [ 741.602450][T17602] netlink: zone id is out of range [ 741.678464][T17619] lo speed is unknown, defaulting to 1000 [ 741.694444][T17627] batadv0: entered promiscuous mode [ 741.699722][T17627] batadv0: entered allmulticast mode [ 741.744599][T17619] lo speed is unknown, defaulting to 1000 [ 741.818008][T17635] syzkaller0: entered promiscuous mode [ 741.820629][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16187'. [ 741.823683][T17635] syzkaller0: entered allmulticast mode [ 741.879112][T17635] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 741.885350][T17635] syzkaller0: Linktype set failed because interface is up [ 741.900341][T17645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.911487][T17645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.258270][T17688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17688 comm=syz.6.16203 [ 742.272991][T17692] netlink: 'syz.4.16201': attribute type 1 has an invalid length. [ 742.292485][T17692] bond0: entered promiscuous mode [ 742.297815][T17692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.322058][T17682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.332925][T17682] bond0: (slave bond1): making interface the new active one [ 742.340360][T17682] bond1: entered promiscuous mode [ 742.346634][T17682] bond0: (slave bond1): Enslaving as an active interface with an up link [ 742.637697][T17746] netlink: 'syz.6.16229': attribute type 30 has an invalid length. [ 742.705920][T17748] lo speed is unknown, defaulting to 1000 [ 742.748735][T17748] lo speed is unknown, defaulting to 1000 [ 743.325322][T17785] lo speed is unknown, defaulting to 1000 [ 743.484684][T17785] lo speed is unknown, defaulting to 1000 [ 743.790404][T17804] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 743.821158][T17804] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 744.148966][T17833] loop5: detected capacity change from 0 to 128 [ 744.198287][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 744.198305][ T29] audit: type=1326 audit(1766364160.671:37460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.246153][ T29] audit: type=1326 audit(1766364160.711:37461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.270010][ T29] audit: type=1326 audit(1766364160.711:37462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.294351][ T29] audit: type=1326 audit(1766364160.711:37463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.318209][ T29] audit: type=1326 audit(1766364160.711:37464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.346643][ T29] audit: type=1326 audit(1766364160.791:37465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.370730][ T29] audit: type=1326 audit(1766364160.791:37466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.398867][ T29] audit: type=1326 audit(1766364160.871:37467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.427203][T17833] bio_check_eod: 84 callbacks suppressed [ 744.427223][T17833] syz.5.16261: attempt to access beyond end of device [ 744.427223][T17833] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 744.545744][ T29] audit: type=1326 audit(1766364160.971:37468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 744.569581][ T29] audit: type=1326 audit(1766364160.971:37469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.5.16261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 745.000034][T17885] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.092694][T17885] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.148940][T17885] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.227797][T17885] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.264984][T17920] netlink: 'syz.9.16299': attribute type 6 has an invalid length. [ 745.294701][T17921] tipc: Started in network mode [ 745.299627][T17921] tipc: Node identity c2758f6877a8, cluster identity 4711 [ 745.306927][T17921] tipc: Enabled bearer , priority 0 [ 745.314938][T17920] netlink: 'syz.9.16299': attribute type 6 has an invalid length. [ 745.330766][T14335] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.344251][T14335] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.353507][T14344] tipc: Resetting bearer [ 745.363131][T14335] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.382077][T14335] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.392291][T17913] tipc: Resetting bearer [ 745.437686][T17913] tipc: Disabling bearer [ 745.583923][T17943] __nla_validate_parse: 11 callbacks suppressed [ 745.583942][T17943] netlink: 96 bytes leftover after parsing attributes in process `syz.9.16310'. [ 745.599675][T17947] loop1: detected capacity change from 0 to 128 [ 745.624091][T17951] loop5: detected capacity change from 0 to 1024 [ 745.631802][T17951] EXT4-fs: Ignoring removed orlov option [ 745.640459][T17951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.962912][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.068496][T17968] bridge0: entered promiscuous mode [ 746.087317][T17968] bridge0: port 3(macsec1) entered blocking state [ 746.094596][T17968] bridge0: port 3(macsec1) entered disabled state [ 746.103444][T17968] macsec1: entered allmulticast mode [ 746.109086][T17968] bridge0: entered allmulticast mode [ 746.119257][T17968] macsec1: left allmulticast mode [ 746.126495][T17968] bridge0: left allmulticast mode [ 746.139298][T17968] bridge0: left promiscuous mode [ 746.192939][T17972] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.208177][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16323'. [ 746.217532][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16323'. [ 746.282540][T17972] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.293774][T17985] netlink: 'syz.1.16325': attribute type 30 has an invalid length. [ 746.333080][T17987] loop4: detected capacity change from 0 to 256 [ 746.362642][T17972] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.401189][T17991] loop1: detected capacity change from 0 to 512 [ 746.413504][T17991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.426719][T17991] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.441100][T17972] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.464551][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.489581][T18003] loop4: detected capacity change from 0 to 1024 [ 746.496367][T14344] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.505779][T18003] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 746.510043][T14374] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.530520][T18003] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 746.539558][T14374] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.548335][T18003] EXT4-fs (loop4): orphan cleanup on readonly fs [ 746.556236][T18003] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.16342: Failed to acquire dquot type 0 [ 746.568391][T14374] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.577634][T18003] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.16342: Failed to acquire dquot type 0 [ 746.599365][T18003] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.16342: Freeing blocks not in datazone - block = 0, count = 4096 [ 746.613864][T18003] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.16342: Failed to acquire dquot type 0 [ 746.616631][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16333'. [ 746.634745][T18003] EXT4-fs (loop4): 1 orphan inode deleted [ 746.641355][T18003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 746.683875][T18003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.842946][T18032] loop1: detected capacity change from 0 to 1024 [ 746.849751][T18032] EXT4-fs: Ignoring removed orlov option [ 746.858099][T18032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.944989][T18040] loop5: detected capacity change from 0 to 1024 [ 746.953148][T18040] EXT4-fs: Ignoring removed orlov option [ 747.020803][T18040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.137422][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.596308][T18060] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 747.604812][T18060] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 747.825415][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.839392][T18069] sd 0:0:1:0: device reset [ 747.845002][T18069] siw: device registration error -23 [ 748.862910][T18090] lo speed is unknown, defaulting to 1000 [ 748.982881][T18090] lo speed is unknown, defaulting to 1000 [ 749.097075][T18095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.112997][T18094] bridge0: port 3(syz_tun) entered blocking state [ 749.119567][T18094] bridge0: port 3(syz_tun) entered disabled state [ 749.143133][T18094] syz_tun: entered allmulticast mode [ 749.157730][T18094] syz_tun: entered promiscuous mode [ 749.179807][T18094] bridge0: port 3(syz_tun) entered blocking state [ 749.186396][T18094] bridge0: port 3(syz_tun) entered forwarding state [ 749.205578][T18098] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 749.226576][T18095] bond1: (slave veth3): Enslaving as an active interface with an up link [ 749.240988][T18099] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 749.256048][T18102] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 749.274798][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 749.274888][ T29] audit: type=1326 audit(1766364165.751:37812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18089 comm="syz.1.16365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa766fc65e7 code=0x0 [ 749.309598][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16367'. [ 749.319046][T18095] bond1 (unregistering): (slave veth3): Releasing backup interface [ 749.329986][T18095] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 749.340682][T18095] bond1 (unregistering): Released all slaves [ 749.352014][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16367'. [ 749.432515][T18101] lo speed is unknown, defaulting to 1000 [ 749.516670][T18106] lo speed is unknown, defaulting to 1000 [ 749.523110][T18101] lo speed is unknown, defaulting to 1000 [ 749.598332][T18106] lo speed is unknown, defaulting to 1000 [ 749.691389][ T29] audit: type=1326 audit(1766364166.171:37813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18113 comm="syz.4.16372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84fb71f749 code=0x0 [ 749.805549][T18119] loop5: detected capacity change from 0 to 1024 [ 749.820616][T18119] EXT4-fs: Ignoring removed orlov option [ 749.857595][T18119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.873675][T18123] loop1: detected capacity change from 0 to 1024 [ 749.892866][T18123] EXT4-fs: Ignoring removed orlov option [ 749.905151][T18123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.926411][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.950584][T18128] netlink: 'syz.9.16379': attribute type 1 has an invalid length. [ 749.991415][T18128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.034755][T18133] bond1: (slave veth5): Enslaving as an active interface with a down link [ 750.066252][T18128] bond1: (slave dummy0): making interface the new active one [ 750.075625][T18128] dummy0: entered promiscuous mode [ 750.081053][T18128] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 750.101230][T18128] bond1 (unregistering): (slave veth5): Releasing active interface [ 750.111852][T18128] bond1 (unregistering): (slave dummy0): Releasing active interface [ 750.127464][T18128] bond1 (unregistering): Released all slaves [ 750.248199][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.541835][T18138] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 750.553685][T18144] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 750.561578][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16382'. [ 750.571611][T18144] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 750.601445][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16382'. [ 750.909440][T18152] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 750.930231][ T29] audit: type=1326 audit(1766364167.401:37814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 750.954463][ T29] audit: type=1326 audit(1766364167.401:37815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 750.978474][ T29] audit: type=1326 audit(1766364167.401:37816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.002541][ T29] audit: type=1326 audit(1766364167.401:37817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.026350][ T29] audit: type=1326 audit(1766364167.401:37818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.050305][ T29] audit: type=1326 audit(1766364167.401:37819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.074532][ T29] audit: type=1326 audit(1766364167.401:37820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.098238][ T29] audit: type=1326 audit(1766364167.401:37821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.5.16388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 751.125296][T18156] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 751.269215][T18155] lo speed is unknown, defaulting to 1000 [ 751.331233][T18162] lo speed is unknown, defaulting to 1000 [ 751.333865][T18155] lo speed is unknown, defaulting to 1000 [ 751.372866][T18172] lo speed is unknown, defaulting to 1000 [ 751.374163][T18162] lo speed is unknown, defaulting to 1000 [ 751.415419][T18172] lo speed is unknown, defaulting to 1000 [ 751.590814][T18184] bridge0: port 1(syz_tun) entered blocking state [ 751.597372][T18184] bridge0: port 1(syz_tun) entered disabled state [ 751.604240][T18184] syz_tun: entered allmulticast mode [ 751.610162][T18184] syz_tun: entered promiscuous mode [ 751.623807][T18187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.653794][T18187] bond1: (slave veth7): Enslaving as an active interface with an up link [ 751.673726][T18187] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 751.704270][T18187] bond1 (unregistering): (slave veth7): Releasing backup interface [ 751.727576][T18193] netlink: 'syz.9.16400': attribute type 1 has an invalid length. [ 751.739000][T18187] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 751.750718][T18187] bond1 (unregistering): Released all slaves [ 751.760879][T18184] lo speed is unknown, defaulting to 1000 [ 751.777603][T18193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.810957][T18196] bond1: (slave veth7): Enslaving as an active interface with a down link [ 751.819640][T18184] lo speed is unknown, defaulting to 1000 [ 751.865426][T18193] bond1: (slave dummy0): making interface the new active one [ 751.874498][T18193] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 751.891569][T18193] bond1 (unregistering): (slave veth7): Releasing active interface [ 751.909206][T18193] bond1 (unregistering): (slave dummy0): Releasing active interface [ 751.918819][T18193] bond1 (unregistering): Released all slaves [ 752.187965][T18204] lo speed is unknown, defaulting to 1000 [ 752.278228][T18213] netlink: 'syz.9.16407': attribute type 1 has an invalid length. [ 752.291489][T18204] lo speed is unknown, defaulting to 1000 [ 752.303048][T18213] bond1: entered promiscuous mode [ 752.308482][T18213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.317825][T18217] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.389213][T18213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 752.397705][T18213] bond1: (slave bond2): making interface the new active one [ 752.405180][T18213] bond2: entered promiscuous mode [ 752.413660][T18213] bond1: (slave bond2): Enslaving as an active interface with an up link [ 752.469166][T18217] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.545194][T18217] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.603345][T18217] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.651621][T18223] lo speed is unknown, defaulting to 1000 [ 752.697224][T14348] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.715085][T14348] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.733844][T18223] lo speed is unknown, defaulting to 1000 [ 752.734217][T14348] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.748017][T14348] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.869799][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16411'. [ 752.886277][T18232] lo speed is unknown, defaulting to 1000 [ 752.936697][T18240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.971709][T18240] bond1: (slave veth11): Enslaving as an active interface with an up link [ 752.980687][T18232] lo speed is unknown, defaulting to 1000 [ 753.011403][T18240] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 753.081041][T18240] bond1 (unregistering): (slave veth11): Releasing backup interface [ 753.098036][T18240] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 753.131066][T18240] bond1 (unregistering): Released all slaves [ 753.160623][T18258] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 753.179530][T18258] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 753.305168][T18263] syzkaller0: entered promiscuous mode [ 753.310827][T18263] syzkaller0: entered allmulticast mode [ 753.323535][T18268] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.355444][T18263] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 753.361514][T18263] syzkaller0: Linktype set failed because interface is up [ 753.382088][T18268] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.396096][T18264] lo speed is unknown, defaulting to 1000 [ 753.442539][T18268] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.465910][T18264] lo speed is unknown, defaulting to 1000 [ 753.502735][T18268] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.564416][T14348] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.584827][T14361] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.603669][T14361] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.623117][T14361] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.871299][T18295] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 753.879307][T18295] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 753.911666][T18297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.945088][T18297] bond2: (slave veth5): Enslaving as an active interface with an up link [ 753.968753][T18297] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 753.987200][T18297] bond2 (unregistering): (slave veth5): Releasing backup interface [ 754.057208][T18297] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 754.076804][T18297] bond2 (unregistering): Released all slaves [ 754.722404][T18312] netlink: 'syz.6.16442': attribute type 1 has an invalid length. [ 754.738681][T18312] bond1: entered promiscuous mode [ 754.744406][T18312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.772828][T18312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.781813][T18312] bond1: (slave bond2): making interface the new active one [ 754.789282][T18312] bond2: entered promiscuous mode [ 754.796395][T18312] bond1: (slave bond2): Enslaving as an active interface with an up link [ 754.806800][T18317] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.873350][T18317] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.963647][T18317] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.009857][T18327] lo speed is unknown, defaulting to 1000 [ 755.062129][T18317] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.082020][T18327] lo speed is unknown, defaulting to 1000 [ 755.204773][T14348] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.238013][T14348] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.250510][T14348] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.259413][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 755.259481][ T29] audit: type=1326 audit(1766364171.731:38805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.290085][T14348] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.301400][ T29] audit: type=1326 audit(1766364171.761:38806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.325241][ T29] audit: type=1326 audit(1766364171.761:38807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.349014][ T29] audit: type=1326 audit(1766364171.761:38808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.372911][ T29] audit: type=1326 audit(1766364171.761:38809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.396902][ T29] audit: type=1326 audit(1766364171.771:38810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.421017][ T29] audit: type=1326 audit(1766364171.771:38811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.444866][ T29] audit: type=1326 audit(1766364171.771:38812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.468888][ T29] audit: type=1326 audit(1766364171.771:38813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.492567][ T29] audit: type=1326 audit(1766364171.771:38814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.5.16448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 755.560416][T18341] SELinux: failed to load policy [ 755.793655][T18348] lo speed is unknown, defaulting to 1000 [ 755.825652][T18348] lo speed is unknown, defaulting to 1000 [ 756.718547][T18393] loop1: detected capacity change from 0 to 2048 [ 756.779921][T18393] Alternate GPT is invalid, using primary GPT. [ 756.786399][T18393] loop1: p2 p3 p7 [ 757.010692][T18401] pimreg: entered allmulticast mode [ 757.018141][T18401] pimreg: left allmulticast mode [ 757.116113][T18412] bridge_slave_0: left allmulticast mode [ 757.122074][T18412] bridge_slave_0: left promiscuous mode [ 757.127850][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.138516][T18412] bridge_slave_1: left allmulticast mode [ 757.144370][T18412] bridge_slave_1: left promiscuous mode [ 757.150123][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.167344][T18412] team0: Port device team_slave_0 removed [ 757.185580][T18412] team0: Port device team_slave_1 removed [ 757.193443][T18412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.201080][T18412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.212496][T18412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.219986][T18412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.230813][T18412] net_ratelimit: 15 callbacks suppressed [ 757.230833][T18412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.391901][T18422] syz_tun: left allmulticast mode [ 757.397022][T18422] syz_tun: left promiscuous mode [ 757.402164][T18422] bridge0: port 1(syz_tun) entered disabled state [ 757.423220][T18422] bond0: (slave bond_slave_0): Releasing backup interface [ 757.433640][T18422] bond0: (slave bond_slave_1): Releasing backup interface [ 757.455419][T18422] team0: Port device team_slave_0 removed [ 757.465925][T18422] team0: Port device team_slave_1 removed [ 757.477645][T18422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.494263][T18424] syz_tun: entered promiscuous mode [ 757.499537][T18424] syz_tun: left promiscuous mode [ 757.577514][T18436] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 757.585518][T18436] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 757.617545][T18440] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.652645][T18440] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.726016][T18447] loop1: detected capacity change from 0 to 512 [ 757.733245][T18447] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 757.743610][T18440] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.762190][T18447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.777883][T18447] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.16491: lblock 23 mapped to illegal pblock 18 (length 1) [ 757.795448][T18440] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.806798][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.846608][T14361] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.858134][T14361] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.870799][T14348] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.883655][ T2892] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.432466][T18461] lo speed is unknown, defaulting to 1000 [ 758.502578][T18461] lo speed is unknown, defaulting to 1000 [ 758.677812][T18475] syz_tun: left allmulticast mode [ 758.683006][T18475] syz_tun: left promiscuous mode [ 758.688450][T18475] bridge0: port 3(syz_tun) entered disabled state [ 758.704973][T18475] bond0: (slave batadv0): Releasing backup interface [ 758.738992][T18480] loop1: detected capacity change from 0 to 512 [ 758.739508][T18475] bridge_slave_0: left allmulticast mode [ 758.746852][T18480] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 758.751365][T18475] bridge_slave_0: left promiscuous mode [ 758.762499][T18480] EXT4-fs (loop1): orphan cleanup on readonly fs [ 758.766761][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.773348][T18480] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.16502: Block bitmap for bg 0 marked uninitialized [ 758.794295][T18480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 758.803420][T18480] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.16502: Block bitmap for bg 0 marked uninitialized [ 758.818045][T18480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 758.828008][T18480] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.16502: Block bitmap for bg 0 marked uninitialized [ 758.842105][T18480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 758.843221][T18475] bridge_slave_1: left allmulticast mode [ 758.851318][T18480] EXT4-fs (loop1): 1 orphan inode deleted [ 758.856775][T18475] bridge_slave_1: left promiscuous mode [ 758.863322][T18480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 758.868539][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.929060][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.943873][T18475] bond0: (slave bond_slave_0): Releasing backup interface [ 758.991077][T18475] bond0: (slave bond_slave_1): Releasing backup interface [ 759.031986][T18475] team0: Port device team_slave_0 removed [ 759.071641][T18475] team0: Port device team_slave_1 removed [ 759.090967][T18475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.098693][T18475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.141945][T18475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.149639][T18475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.203146][T18475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.290811][T18493] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 760.515787][T18520] bridge0: port 3(gretap0) entered blocking state [ 760.522419][T18520] bridge0: port 3(gretap0) entered disabled state [ 760.533540][T18520] gretap0: entered allmulticast mode [ 760.540380][T18520] gretap0: entered promiscuous mode [ 760.557534][T18520] gretap0: left allmulticast mode [ 760.562845][T18520] gretap0: left promiscuous mode [ 760.568158][T18520] bridge0: port 3(gretap0) entered disabled state [ 760.621354][T18533] bridge_slave_0: left allmulticast mode [ 760.627062][T18533] bridge_slave_0: left promiscuous mode [ 760.632863][T18533] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.641553][T18533] bridge_slave_1: left allmulticast mode [ 760.647314][T18533] bridge_slave_1: left promiscuous mode [ 760.653247][T18533] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.662624][T18533] bond0: (slave bond_slave_0): Releasing backup interface [ 760.671949][T18533] bond0: (slave bond_slave_1): Releasing backup interface [ 760.682317][T18533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 760.942971][T18539] bridge0: port 1(macsec0) entered blocking state [ 760.950739][T18539] bridge0: port 1(macsec0) entered disabled state [ 760.962100][T18539] macsec0: entered allmulticast mode [ 760.968480][T18539] bridge0: entered allmulticast mode [ 760.991767][T18539] macsec0: left allmulticast mode [ 760.997897][T18539] bridge0: left allmulticast mode [ 761.191197][T18550] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.271378][T18550] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.352636][T18550] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.411404][T18550] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.507153][ T59] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.527381][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.555459][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.564133][ T59] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.645404][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 761.645451][ T29] audit: type=1326 audit(1766364178.121:39589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.677319][ T29] audit: type=1326 audit(1766364178.121:39590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.701366][ T29] audit: type=1326 audit(1766364178.121:39591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.725947][ T29] audit: type=1326 audit(1766364178.121:39592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.749923][ T29] audit: type=1326 audit(1766364178.121:39593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.774120][ T29] audit: type=1326 audit(1766364178.121:39594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.797871][ T29] audit: type=1326 audit(1766364178.121:39595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.821721][ T29] audit: type=1326 audit(1766364178.131:39596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.845584][ T29] audit: type=1326 audit(1766364178.131:39597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 761.869386][ T29] audit: type=1326 audit(1766364178.131:39598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.16534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f69256bf749 code=0x7ffc0000 [ 763.202002][T19381] netlink: 'syz.5.16543': attribute type 30 has an invalid length. [ 763.552824][T19390] netlink: 'syz.1.16550': attribute type 13 has an invalid length. [ 763.614160][T19390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.625190][T19390] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.683450][T19390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.762235][T19402] netlink: 'syz.4.16556': attribute type 1 has an invalid length. [ 763.791465][T19402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.833199][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16556'. [ 763.851375][T19402] bond2 (unregistering): Released all slaves [ 764.018712][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16557'. [ 764.291218][T19427] netlink: 'syz.1.16559': attribute type 30 has an invalid length. [ 764.409830][T19446] netlink: 'syz.5.16568': attribute type 13 has an invalid length. [ 764.453373][T19446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.498613][T19450] loop1: detected capacity change from 0 to 8192 [ 764.527207][T19452] loop5: detected capacity change from 0 to 1024 [ 764.541176][T19452] EXT4-fs: Ignoring removed orlov option [ 764.555937][T19452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.843961][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.863106][T19478] netlink: 'syz.6.16585': attribute type 1 has an invalid length. [ 764.876616][T19478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 764.889629][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16585'. [ 764.909089][T19478] bond3 (unregistering): Released all slaves [ 765.842750][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16601'. [ 766.467491][T19543] loop1: detected capacity change from 0 to 512 [ 766.485197][T19543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 766.508479][T19543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.561754][T19543] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 766.654543][ T29] kauditd_printk_skb: 1050 callbacks suppressed [ 766.654561][ T29] audit: type=1326 audit(1766364183.131:40649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b67965e7 code=0x7ffc0000 [ 766.685371][ T29] audit: type=1326 audit(1766364183.131:40650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b673b829 code=0x7ffc0000 [ 766.709130][ T29] audit: type=1326 audit(1766364183.131:40651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b679f749 code=0x7ffc0000 [ 766.733076][ T29] audit: type=1326 audit(1766364183.141:40652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b67965e7 code=0x7ffc0000 [ 766.757258][ T29] audit: type=1326 audit(1766364183.141:40653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b673b829 code=0x7ffc0000 [ 766.781214][ T29] audit: type=1326 audit(1766364183.141:40654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b679f749 code=0x7ffc0000 [ 766.805053][ T29] audit: type=1326 audit(1766364183.151:40655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b67965e7 code=0x7ffc0000 [ 766.828680][ T29] audit: type=1326 audit(1766364183.151:40656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b673b829 code=0x7ffc0000 [ 766.852329][ T29] audit: type=1326 audit(1766364183.151:40657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b679f749 code=0x7ffc0000 [ 766.875946][ T29] audit: type=1326 audit(1766364183.161:40658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b67965e7 code=0x7ffc0000 [ 766.902716][T15552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.925601][T19557] veth12: entered promiscuous mode [ 766.931392][T19557] veth12: entered allmulticast mode [ 767.000027][T19561] loop1: detected capacity change from 0 to 512 [ 767.013402][T19561] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 767.030826][T19561] EXT4-fs (loop1): mount failed [ 767.060415][T19563] tipc: Started in network mode [ 767.065529][T19563] tipc: Node identity de6149ed4f2b, cluster identity 4711 [ 767.067968][T19569] loop1: detected capacity change from 0 to 1024 [ 767.072787][T19563] tipc: Enabled bearer , priority 0 [ 767.086128][T19569] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 767.105618][T19569] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 767.114181][T19559] tipc: Resetting bearer [ 767.120733][T19569] EXT4-fs (loop1): orphan cleanup on readonly fs [ 767.128639][T19569] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.16619: Failed to acquire dquot type 0 [ 767.140942][T19569] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.16619: Failed to acquire dquot type 0 [ 767.148898][T19559] tipc: Disabling bearer [ 767.158298][T19569] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.16619: Freeing blocks not in datazone - block = 0, count = 4096 [ 767.172355][T19569] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.16619: Failed to acquire dquot type 0 [ 767.184159][T19569] EXT4-fs (loop1): 1 orphan inode deleted [ 767.190710][T19569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.209775][T19569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.263549][T19584] tipc: New replicast peer: 255.255.255.255 [ 767.269692][T19584] tipc: Enabled bearer , priority 10 [ 767.428139][T19590] loop5: detected capacity change from 0 to 512 [ 767.469138][T19590] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 767.501090][T19590] EXT4-fs (loop5): mount failed [ 767.879711][T19620] veth8: entered promiscuous mode [ 767.884944][T19620] veth8: entered allmulticast mode [ 767.972193][T19630] tipc: Enabling of bearer rejected, failed to enable media [ 768.198874][T19639] netlink: 'syz.1.16651': attribute type 13 has an invalid length. [ 768.199747][T19640] tipc: Enabling of bearer rejected, failed to enable media [ 768.230300][T19639] gretap0: refused to change device tx_queue_len [ 768.247312][T19639] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 768.340480][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16647'. [ 768.380221][ T1109] tipc: Node number set to 2437564909 [ 768.569006][T19675] loop5: detected capacity change from 0 to 128 [ 768.590909][T19675] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.608738][T19675] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 768.629586][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16662'. [ 768.649966][T19684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16662'. [ 768.675407][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16662'. [ 768.685356][T19684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16662'. [ 768.694719][T19684] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16662'. [ 768.711291][T15559] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.808075][T19644] syz.6.16642 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 768.822873][T19644] CPU: 0 UID: 0 PID: 19644 Comm: syz.6.16642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 768.822948][T19644] Tainted: [W]=WARN [ 768.822957][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.822971][T19644] Call Trace: [ 768.822979][T19644] [ 768.822989][T19644] __dump_stack+0x1d/0x30 [ 768.823019][T19644] dump_stack_lvl+0x95/0xd0 [ 768.823065][T19644] dump_stack+0x15/0x1b [ 768.823141][T19644] dump_header+0x81/0x240 [ 768.823165][T19644] oom_kill_process+0x295/0x350 [ 768.823192][T19644] out_of_memory+0x97b/0xb80 [ 768.823219][T19644] try_charge_memcg+0x610/0xa10 [ 768.823361][T19644] obj_cgroup_charge_pages+0xa6/0x150 [ 768.823389][T19644] __memcg_kmem_charge_page+0x9f/0x170 [ 768.823460][T19644] __alloc_frozen_pages_noprof+0x18f/0x360 [ 768.823532][T19644] alloc_pages_mpol+0xb3/0x260 [ 768.823601][T19644] alloc_pages_noprof+0x90/0x130 [ 768.823628][T19644] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 768.823662][T19644] __kvmalloc_node_noprof+0x492/0x6b0 [ 768.823724][T19644] ? ip_set_alloc+0x24/0x30 [ 768.823753][T19644] ? ip_set_alloc+0x24/0x30 [ 768.823781][T19644] ip_set_alloc+0x24/0x30 [ 768.823808][T19644] hash_netiface_create+0x282/0x740 [ 768.823893][T19644] ? __pfx_hash_netiface_create+0x10/0x10 [ 768.823923][T19644] ip_set_create+0x3cc/0x970 [ 768.823948][T19644] ? __nla_parse+0x40/0x60 [ 768.824007][T19644] nfnetlink_rcv_msg+0x4c6/0x590 [ 768.824049][T19644] netlink_rcv_skb+0x123/0x220 [ 768.824076][T19644] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 768.824186][T19644] nfnetlink_rcv+0x167/0x16c0 [ 768.824221][T19644] ? __list_del_entry_valid_or_report+0x65/0x130 [ 768.824265][T19644] ? __rmqueue_pcplist+0x9c2/0xb90 [ 768.824290][T19644] ? should_fail_ex+0x30/0x280 [ 768.824312][T19644] ? selinux_nlmsg_lookup+0x99/0x890 [ 768.824364][T19644] ? __rcu_read_unlock+0x34/0x70 [ 768.824384][T19644] ? __netlink_lookup+0x266/0x2a0 [ 768.824415][T19644] netlink_unicast+0x5c0/0x690 [ 768.824469][T19644] netlink_sendmsg+0x58b/0x6b0 [ 768.824500][T19644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.824529][T19644] __sock_sendmsg+0x145/0x180 [ 768.824604][T19644] ____sys_sendmsg+0x31e/0x4a0 [ 768.824633][T19644] ___sys_sendmsg+0x17b/0x1d0 [ 768.824669][T19644] __x64_sys_sendmsg+0xd4/0x160 [ 768.824737][T19644] x64_sys_call+0x17ba/0x3000 [ 768.824759][T19644] do_syscall_64+0xca/0x2b0 [ 768.824791][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.824881][T19644] RIP: 0033:0x7f44b679f749 [ 768.824896][T19644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.824913][T19644] RSP: 002b:00007f44b51ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.824935][T19644] RAX: ffffffffffffffda RBX: 00007f44b69f5fa0 RCX: 00007f44b679f749 [ 768.824980][T19644] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 768.824992][T19644] RBP: 00007f44b6823f91 R08: 0000000000000000 R09: 0000000000000000 [ 768.825004][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.825015][T19644] R13: 00007f44b69f6038 R14: 00007f44b69f5fa0 R15: 00007ffe497ecb98 [ 768.825032][T19644] [ 768.825041][T19644] memory: usage 307200kB, limit 307200kB, failcnt 118 [ 769.144846][T19644] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 769.152949][T19644] kmem: usage 238748kB, limit 9007199254740988kB, failcnt 0 [ 769.160322][T19644] Memory cgroup stats for /syz6: [ 769.160725][T19644] cache 69840896 [ 769.169366][T19644] rss 200704 [ 769.172884][T19644] shmem 524288 [ 769.176309][T19644] mapped_file 69632 [ 769.180135][T19644] dirty 69632 [ 769.183455][T19644] writeback 0 [ 769.186789][T19644] workingset_refault_anon 5494 [ 769.191697][T19644] workingset_refault_file 24 [ 769.196297][T19644] swap 0 [ 769.199136][T19644] swapcached 0 [ 769.202556][T19644] pgpgin 569411 [ 769.206097][T19644] pgpgout 552302 [ 769.209725][T19644] pgfault 552532 [ 769.213562][T19644] pgmajfault 721 [ 769.217380][T19644] inactive_anon 724992 [ 769.221697][T19644] active_anon 0 [ 769.225316][T19644] inactive_file 0 [ 769.229104][T19644] active_file 106496 [ 769.233242][T19644] unevictable 69246976 [ 769.237407][T19644] hierarchical_memory_limit 314572800 [ 769.242904][T19644] hierarchical_memsw_limit 9223372036854771712 [ 769.249098][T19644] total_cache 69840896 [ 769.253190][T19644] total_rss 200704 [ 769.256931][T19644] total_shmem 524288 [ 769.260866][T19644] total_mapped_file 69632 [ 769.265352][T19644] total_dirty 69632 [ 769.269149][T19644] total_writeback 0 [ 769.273117][T19644] total_workingset_refault_anon 5494 [ 769.278669][T19644] total_workingset_refault_file 24 [ 769.283835][T19644] total_swap 0 [ 769.287293][T19644] total_swapcached 0 [ 769.291346][T19644] total_pgpgin 569411 [ 769.295348][T19644] total_pgpgout 552302 [ 769.299620][T19644] total_pgfault 552533 [ 769.303760][T19644] total_pgmajfault 721 [ 769.307920][T19644] total_inactive_anon 724992 [ 769.312631][T19644] total_active_anon 0 [ 769.316726][T19644] total_inactive_file 0 [ 769.320962][T19644] total_active_file 106496 [ 769.325369][T19644] total_unevictable 69246976 [ 769.329948][T19644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.16642,pid=19643,uid=0 [ 769.345004][T19644] Memory cgroup out of memory: Killed process 19644 (syz.6.16642) total-vm:93836kB, anon-rss:1268kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 769.503027][T19714] netlink: 'syz.6.16675': attribute type 1 has an invalid length. [ 769.512189][T19712] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 769.528633][T19714] bond3: (slave gretap1): making interface the new active one [ 769.537039][T19714] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 770.692764][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16709'. [ 770.938146][T19800] lo speed is unknown, defaulting to 1000 [ 771.096039][T19800] lo speed is unknown, defaulting to 1000 [ 771.447903][T19841] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 771.711564][T19860] syz_tun: entered promiscuous mode [ 771.729729][T19860] vlan0: entered promiscuous mode [ 771.764797][T19865] lo: entered allmulticast mode [ 771.780902][T19865] lo: entered promiscuous mode [ 771.785823][T19865] lo: left allmulticast mode [ 771.823672][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16736'. [ 772.438982][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16746'. [ 772.484592][T19901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.571670][T19901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.596054][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16753'. [ 772.645377][T19901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.654168][T19913] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 772.751247][T19901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.844800][T19921] loop5: detected capacity change from 0 to 2048 [ 772.853268][ T8993] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.881164][ T8993] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.889883][T19924] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 772.889995][T19923] IPVS: stopping backup sync thread 19924 ... [ 772.906724][T19921] loop5: p1 < > p4 [ 772.911537][T19921] loop5: p4 size 8388608 extends beyond EOD, truncated [ 772.926518][ T8993] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.944294][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 772.944313][ T29] audit: type=1400 audit(1766364189.421:41400): avc: denied { append } for pid=19920 comm="syz.5.16758" name="loop5p4" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 772.976392][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16758'. [ 772.986744][ T8993] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.028966][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16758'. [ 773.216303][T19936] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16765'. [ 773.244296][T19937] tipc: Enabling of bearer rejected, already enabled [ 773.284157][ T29] audit: type=1326 audit(1766364189.761:41401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.308084][ T29] audit: type=1326 audit(1766364189.761:41402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.370697][ T29] audit: type=1326 audit(1766364189.761:41403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.394552][ T29] audit: type=1326 audit(1766364189.761:41404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.418369][ T29] audit: type=1326 audit(1766364189.761:41405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.442261][ T29] audit: type=1326 audit(1766364189.761:41406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.466458][ T29] audit: type=1326 audit(1766364189.761:41407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.490360][ T29] audit: type=1326 audit(1766364189.761:41408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.514304][ T29] audit: type=1326 audit(1766364189.761:41409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.9.16766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 773.542384][T19948] rdma_op ffff88819fbd0980 conn xmit_rdma 0000000000000000 [ 773.599567][T19956] program syz.5.16772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.168120][T19984] syzkaller0: entered allmulticast mode [ 774.191774][T19984] syzkaller0 (unregistering): left allmulticast mode [ 774.325905][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16788'. [ 774.379265][T19982] lo speed is unknown, defaulting to 1000 [ 774.403610][T20000] lo: entered allmulticast mode [ 774.447710][T20000] lo: entered promiscuous mode [ 774.452782][T20000] lo: left allmulticast mode [ 774.483382][T19982] lo speed is unknown, defaulting to 1000 [ 774.658328][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16800'. [ 775.376723][T20072] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.410438][T20077] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 775.410784][T20076] IPVS: stopping backup sync thread 20077 ... [ 775.428572][T20072] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.481784][T20081] rdma_op ffff888171ca6580 conn xmit_rdma 0000000000000000 [ 775.492616][T20072] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.550790][T20072] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.659570][T14348] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.704262][T14348] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.742943][T14348] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.772000][T14348] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.959266][T20106] __nla_validate_parse: 3 callbacks suppressed [ 775.959282][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16831'. [ 775.993347][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16831'. [ 776.015923][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16832'. [ 776.074877][T20115] syz_tun: entered promiscuous mode [ 776.086507][T20115] vlan0: entered promiscuous mode [ 776.111243][T20121] IPVS: Unknown mcast interface: macvlan0 [ 776.260826][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16846'. [ 776.294719][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16846'. [ 776.308964][T20143] netlink: 'syz.4.16848': attribute type 13 has an invalid length. [ 776.323202][T20143] gretap0: refused to change device tx_queue_len [ 776.331589][T20143] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 776.440559][T20150] netlink: 'syz.4.16852': attribute type 10 has an invalid length. [ 776.470595][T20150] team0: Failed to send options change via netlink (err -105) [ 776.478246][T20150] team0: Port device dummy0 added [ 776.506063][T20150] netlink: 'syz.4.16852': attribute type 10 has an invalid length. [ 776.515023][T20150] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 776.528217][T20150] team0: Failed to send options change via netlink (err -105) [ 776.545724][T20150] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 776.561936][T20150] team0: Port device dummy0 removed [ 776.978268][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16868'. [ 777.315013][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16872'. [ 777.346236][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16872'. [ 777.531156][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16879'. [ 777.551282][T20217] netem: change failed [ 777.606046][T20224] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.631859][T20231] Cannot find add_set index 0 as target [ 777.667759][T20237] geneve2: entered promiscuous mode [ 777.673229][T20237] geneve2: entered allmulticast mode [ 777.712673][T20224] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.813212][T20224] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.902659][T20224] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.252688][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 778.252709][ T29] audit: type=1326 audit(1766364194.731:41607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20299 comm="syz.4.16917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fb71f749 code=0x7ffc0000 [ 778.284569][ T29] audit: type=1326 audit(1766364194.731:41608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20299 comm="syz.4.16917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fb71f749 code=0x7ffc0000 [ 778.308568][ T29] audit: type=1326 audit(1766364194.731:41609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20299 comm="syz.4.16917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f84fb71f749 code=0x7ffc0000 [ 778.332475][ T29] audit: type=1326 audit(1766364194.731:41610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20299 comm="syz.4.16917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fb71f749 code=0x7ffc0000 [ 778.356454][ T29] audit: type=1326 audit(1766364194.731:41611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20299 comm="syz.4.16917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fb71f749 code=0x7ffc0000 [ 778.405246][T20304] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 778.517845][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16925'. [ 778.561841][T20318] tipc: New replicast peer: 255.255.255.83 [ 778.567838][T20318] tipc: Enabled bearer , priority 10 [ 778.875724][ T53] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.898501][ T53] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.934319][ T53] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.962050][ T53] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.978295][T20344] netlink: 'syz.5.16935': attribute type 10 has an invalid length. [ 779.031778][T20344] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 779.119296][T20348] lo speed is unknown, defaulting to 1000 [ 779.174786][T20348] lo speed is unknown, defaulting to 1000 [ 779.538284][ T29] audit: type=1326 audit(1766364196.011:41612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.9.16941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 779.575024][ T29] audit: type=1326 audit(1766364196.041:41613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.9.16941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 779.598873][ T29] audit: type=1326 audit(1766364196.041:41614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.9.16941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 779.622791][ T29] audit: type=1326 audit(1766364196.041:41615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.9.16941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 779.646689][ T29] audit: type=1326 audit(1766364196.041:41616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.9.16941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f74fe67f749 code=0x7ffc0000 [ 779.882006][T20397] netlink: '+}[@': attribute type 7 has an invalid length. [ 780.203348][T20423] lo: entered allmulticast mode [ 780.208652][T20423] lo: left allmulticast mode [ 780.224612][T20425] netlink: 'syz.1.16972': attribute type 1 has an invalid length. [ 780.236197][T20409] ================================================================== [ 780.244567][T20409] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 780.254292][T20409] [ 780.256606][T20409] write to 0xffff88811f291e00 of 8 bytes by task 20401 on cpu 0: [ 780.264322][T20409] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 780.270223][T20409] page_pool_alloc_pages+0xd0/0x130 [ 780.275485][T20409] bpf_test_run_xdp_live+0x54d/0x11d0 [ 780.280978][T20409] bpf_prog_test_run_xdp+0x525/0x970 [ 780.286363][T20409] bpf_prog_test_run+0x204/0x340 [ 780.291293][T20409] __sys_bpf+0x4c0/0x7c0 [ 780.295535][T20409] __x64_sys_bpf+0x41/0x50 [ 780.299959][T20409] x64_sys_call+0x28e1/0x3000 [ 780.304801][T20409] do_syscall_64+0xca/0x2b0 [ 780.309490][T20409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.315557][T20409] [ 780.317871][T20409] read to 0xffff88811f291e00 of 8 bytes by task 20409 on cpu 1: [ 780.325490][T20409] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 780.331399][T20409] napi_pp_put_page+0xe9/0x200 [ 780.336171][T20409] skb_free_head+0x12c/0x150 [ 780.340853][T20409] skb_release_data+0x33b/0x370 [ 780.345711][T20409] __kfree_skb+0x44/0x150 [ 780.350038][T20409] sk_skb_reason_drop+0xbd/0x270 [ 780.355068][T20409] udpv6_recvmsg+0x1f7/0xca0 [ 780.359661][T20409] inet6_recvmsg+0x143/0x290 [ 780.364252][T20409] sock_recvmsg+0x95/0x170 [ 780.369370][T20409] ____sys_recvmsg+0xf5/0x280 [ 780.374046][T20409] ___sys_recvmsg+0x11f/0x370 [ 780.378719][T20409] do_recvmmsg+0x1ef/0x540 [ 780.383150][T20409] __x64_sys_recvmmsg+0xe5/0x170 [ 780.388083][T20409] x64_sys_call+0x2b75/0x3000 [ 780.392770][T20409] do_syscall_64+0xca/0x2b0 [ 780.397272][T20409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.403163][T20409] [ 780.405475][T20409] value changed: 0xffffea0005608980 -> 0x0000000000000000 [ 780.412568][T20409] [ 780.414903][T20409] Reported by Kernel Concurrency Sanitizer on: [ 780.421057][T20409] CPU: 1 UID: 0 PID: 20409 Comm: syz.4.16961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 780.432518][T20409] Tainted: [W]=WARN [ 780.436324][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.446542][T20409] ================================================================== [ 780.464484][T20425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.484319][T20427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.491842][T20427] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 780.503129][T20427] bond1: (slave vxcan1): Error -95 calling set_mac_address