last executing test programs: 2m48.252444246s ago: executing program 3 (id=4611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create(0xeed) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000003}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000340)=""/226, 0xe2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000901ac1414aa030000000000"], 0x10) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f0000000280)}, 0x10) 2m48.120355697s ago: executing program 3 (id=4613): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m48.08934618s ago: executing program 3 (id=4615): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 2m48.044179633s ago: executing program 3 (id=4617): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) setitimer(0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x62040200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 2m46.507197531s ago: executing program 32 (id=4641): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000240)="b4", 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="8b", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000000380)="6fc12b88e527cdc18e2086eb8b1ee7542e50599c", 0x14}, {&(0x7f0000000500)="f2d6a8fd7bbee44db1ffcd6dc4fdbf4eb187e8edeff469896f6a414f8bc3575eaca2745b9ef4b64a6b8da80e0f0dd5d7f94c462dee7afd6fb9a2c11679983da157f109479198d2d1ec7d3adbcd91254ee8cdbb4469db3a24632eb7f02e42cfec6c53f9b228a1488c8603c1c0b023c1586340bc72259f322194760fe7b68fabe8c4c2", 0x82}, {&(0x7f00000003c0)="68ef67fe48aea5881c3f9eabf7705ac039625ff78aa3aa72c4", 0x19}, {&(0x7f0000000400)="d03aad3676ac4a60df938ce6eaaabd66f0f6b04ed5c637cb9c6b8e71bd8ccd5ee01e40a6c9", 0x25}, {&(0x7f0000000680)="490efec797e26f8605300e09f67c2ff2cc474bf48a7a0ace48e3b3607e3e96d30a4a651ab225ca5b824de75f3e8146a0426c243b9b19e70038bc998d7eaa4635092f068ef0b58d591deb95277ff9942e03d548ef98708fcff07518c44acb8dd6415228a351fa85c584eb9324b68572f5f9907fbf3de188feebf8479000616f8b4223b1e47f6cd5472f8ef78f17fa540b88c80bbf78e4d739d76225e4b539fcb4d39948c93839b1b4228b654c26", 0xad}, {&(0x7f0000000740)="4e97ed0f08f6d76736d92ee9364c9ef5a03d3fd1207fe195887245091dd7f4e2445094dd30382159097813a38b061cfb4b3bafc9d98c5b27216ae1409dfe8c7a6ea8f4802e41ea0fe975407e4503b095c1ed6ab6117eed40fb20e7cd66488beb573c23461f40d22565c10ab58ff0", 0x6e}, {&(0x7f0000001cc0)="1d96879f7d2ae3c141253f9ade941b60cca08174ee20851b79d0704dc340833a410807aa228396f1adcbd74433c8b547501f695034235907277e022558ce5c9c5916b30860ed90d6aecddafb8eaa32c3e8a2640aa40ef487b073794c83470016807c0ade2435b74e45955ba382544633409f70c9cc1dd4149d52f44e66acdcf475b700280154417a26eee83b13e69e292f373d8083a43e5c319a7322fec17cb57b86680d78af79294d53c727d7a38fffe8ced7a4f16b5fd06340d72e6cc0c29e88ba7018559b5011faa7557277736ff4fe64501165125ee8e11b0401f661cc37e1cd93b350d6601fd02bd0292ec773c3", 0xf0}, {&(0x7f0000001dc0)="a6797d35efa0a8030c04f4835cb2fc5ca87f385dc80f33ce5f495a11c9cb95ffab1aa2fb1d6f779bebe43f73afecb28a2c3155117bccc7a637848fdceec8b3c693778163b53253951d39e111c44618b64bbfba29891530757e554b9ba4e74ea02d132e36738a0f4b189162b57c2802558ad5ff91426e10b1fb9223896d3abb1723c5256d74e7d21305eab85e763ace8f2557253bc0aac4d1eee395afb13c645070b8d144b693ea39b4c9ea27f051d389380549292af05551f894f4bb0d343ac34996769b7271dd53299763e5b2b0cd4d4479399bedc7f357d28377488aaa473355ef8e73b336df5c8f6e2b47083dc89c8ac31a34ea4d2e41cd3265af6325f1d6898ab70d394eba621dc72368b002542f52870e06a734aac5db01e739d4f1902c94cad941d5dcb3bed57b44a64c78956e8b0641c465feaf1599785fae1ba36ce1cc16413e86bb4a0ca9e81a50c9597fc54581b87c849cffbadea925394de78c38f61ee420ea94cbc06510173bb83a6fed1d58f6f07799c9a92aadadc2821daa7743ab5a1b0a13de5d753c165ecb75416639a75b161b3fbf1647cda0ffae95a31fc349b02d623eacea2abc403109c7ef6db05e48a7f3846de6c85ffbad0f93b5de2d46fad0da9d69a1d440940a3b893f19e87f4dc5e007cc81d67dde97265220961a624e4d383fbc42be7e5f6bbe42ab7034a930099aa21f1b6f750d5476407a491f2f01766685c050408fae1b2aea8efe4e3904e15a8d15e139c05722507fdaf821bee7df6ae70bd9319bc385c28e61a882301aea3c7c31253548eb38a5b0c9a6d49d652aa58003b00cfb449790e9372031a377600fb28c743b715bded3d82d253ec3b6a71d2ca00cbfd22d81eb4a4434b72e7cad301e632a09c022e1074e391b08c053145fee35b58e69205cae34a7d6a899bcd5e8d1b916e2041805267e3cd5deba0b11496fd4dd4f28df6545c64befde7e723a4393b32b3f7558e41958681d80df94bc3203d086772a1578d612e840b32dd73c3eea4f6534f8c90144f7a163de0dedc2acb21bd16b8edb54d1f4e146ed409d0ef7fc11ab26532d11a722921b2906eee79c84dbd4e45a9cfda64ac9b34f69592b66bbd6b9e4344abc4f65add894c4d5765238e03e799da60ad31dcd1f725a5ad5a65d3fde5ca8e44e3009c1b69810a3ce211cd9c094618ff3766e4d546aeed25078d4c2d0e271aaa8bc81bfc1aae9b1b1aec914a93c5eda0ce027077fad4dc95edcc7f17b0ea60b01727b77d9ff91705289e3dc38a54e676f5a9cbdc5224a84b8130e03ce2dee183c001b1674edead7429133de62fefc55e25fa644815696378fad4829b28774612d4dd2fe420dc39f5dce0e54193c57b1101f8846857577d00b56fbacfb3424ed979581892ceb0d49e24f1d48c4a14b569477865ddb0a3a2408016cc8629f0c8e89ea7413a58f9e6d004da4e63b68668437d8978f437a72aee16c0a6ba334df07ac905c28f6f9493933c9d05dabf9793f86468f7f9557e289b57e1eb9b7bb5734cc5cf3b4e781c1a7921563a0fd5cbc14a290db7af660c91a3d7041374836a1b50633f1b86d836c6538d53924025f918cd5924b7f0dfbafca0c3ec4ab4e6a93812a8cbb20283e952c3346e8a02317d22ccd90d424f90a1a7badcfbb09128191870d1f2343926387752a3916bf10c97286a825383b4817644ae6f51ea719d45ada28bb8ccb82440d3d54bb4e55e985b4f54d779107b6708a71cf7b31395dda5e38b85f59a44e45c98b2ffa8bb13b6455819ccb3d5832c5a7e331b308332ac8ba507d13b45b3b96154b6d77d649188b7f71d3503663f22402d9b09401cf26b1c04b9d8f40b510230f2fe0e53d91e2ce4958debe799cdb24d185771e183692a4c37a847de7f25da244a4366899f0254597ac05c13e3aa2281ecf9f8f260ec6508acdbcc523f7a3fc4eb1b7c24b151ba3d29f5b50fda407d6dd98ccf4acf30837a94ddc3b402314d2d0251d441f0225eb119d544859da9283996ad29185c6fdccfc205cd7528bbc0aaee89dc9a87b9e731184fd7b6d77ad8135d7edfefbe6a281741b432ae5fae631c916f9b009c7e378ae66bb4fc20c79cf0e6c1a1bacc9638f91b668c9ee6b0647e1dcfab2586adfac41cd92551c1ec699ca819e3dfe5adf2a7d9181b7e2b1451c9dea7565926b31271d9caf235736b2d1cda4f9b6a189d08cedacbea64e7871b6c35fa7bfe81a0b7d62d16b26d5c62b87f31a85dc9138c507bbe0ed5f48a587e96eb4d59567dcd7ddfb58f20adac3fc98c74da5a331fc9031d321967ad4e3c941951e1d437662762dd5c1a65355677116ab301dc22eef49fbab7f30b779f49e500f11619d5257ed82772f936bbad57af65c86a43bfdd6be7c1fdefa47fd415c532a2b8036318223b9e09eb1385248eb8524ec58de00f1b1402917b8ee33dafb19e66ead2623fe46330e4aae8ea9f3f595fcd554bd5b583277f9d9f3776feb4a0efb41b202bcd0e136bc5f463cede77520c38eacb5bc6aeb70334eedb698af814d0ef4bab4fd0e2452b025b7baf32ac9aa6784df930cab408b0245583befda7bc00f215f470b8a0e85823a2350ad05e9fc2793dad9f846f56ab61b30c4ca240cf4122315108dcd9d1a8858ab2ab77a6b2fcda067ddc892a5912e786ca666165912e435c57cec49870fa2a771cdddc707cc1a46b21e139c1337797350e709668b80458b155b5310bd9253893da95454186fd6872f79d3e4fbb0fdfbad7b5e1878bf9a92ee3d2c231c5529259f38819f697a23cabba645f8d3ad879c64d52ff6453936dcaea4f41b9484df8568b6933bb1d9b1b363591a2b35f081eb86eeb1bec5c6bb191973bf804443154d224c52026fe379ced337c8b99cdd57193698c8aaf22308615754315adefcf531ca5b2e4530b725fcf3b69b9f90986ef34f9cb4d95c92c06034e95bf023eff2be941b4769a9892c293c0c116f1aa03beb0312bbb34dcad822453344d7f2363848704de290bdd676b161136a6df81aac0a108edbfd9709194205fa49fab9c22ede9cc3dc19e826b6ddeb6605bdd674bb614dc0454f7dcb2cc1059b391f197508e49926ad34ed7e9bca67a7931917797240e9864fdb3e8723ab1c9756aac2f609ef05883e5ab0400c40351f39bc54f076c09f741b4be0ff99400e3109bb25a86e2df0ba3da00cf06a549edd943e173f03103de2aa318cc1ea1250b5b107aeac20155740c42cb4214c5f55174a7efd63210f951f8eae55990ffa0504baeb727d7c085189e1b330160f61405746e39a0814ad20fe362a5f1726d32316b4e1d39fe31c82f990a96f5867151d90428e681dc8e53504069278a5cbdf2cf8dcf3a6d6ff8227f1fa30d3115885d8029d2f47268526ff08fd63deccca30655e228ebfa94064c403b8a5a8fe8df9d612a58986bc08861a8b9d57d9f8471625f7f1144358afdfb1fac52e4ba45e079bfde12e89cf9139a8644ab92800a1b0dbf5753034a0d21e6aa101bb0a0b278b89e529fb3cf06f75966c9e976d9575d1bc2269c1cbf698e88d7d3b2318fa454c5f21cd1cf39e1bbf14f920c820517b7faff2ed52d16ac941ba9136c3a063481a8c239aadb7aba7cd91b5593deb4eb43b9c823a67d42689c04717bff8287964cba14afd8d99f919e1de807f27ed67f2be063473da687a8d7d64b33ae70311ca892d3d42e9d1548a690b33b755702a728089dd1186d17d6aeb3287067576f1749e16f5b279d0fdef361bf09bec53dc72b0d90a5c7c2c3c5750812d4e2d1b04c8bee701fdb2272d9d8f0178dd1437695fc2e33202c978797a9da161f447e10621842237670bb47f44b2f16cae13f924c7a43adfd4d364c21801878af408909fb102c445626e4be1aae2ac469f98c4244e2c85d2dfe2be6bce0b38738587be23726038c2e03f368758e5a8d3ccb8ef44bc4ae79841e792fc82b5e5c22e0d46bc1be327430c05cc43aab2c8096d754ac40e65b1e3ce5ca4c09aad55cf100a7df88fea5ad63e8e574be728356363a0f7c2ba73fcaa06223607270a9b1b218b1757bc919b9b738a1a6c8aca5f0ee4c6a8ed231a3fde44f096f16ae2aad05f6b77bc89c898d35b0feaf38c000bc0365c0f86eb79a3d1e025f64d0541bffca3cb03633eb2081fedf68440ea784fb758ad4441d7ebd49be3d0510b4a1f8991224c6d9e7f7c5325c06ae6415eafa1a8f46cedace54e7dff2a0de1b4016ca4ec9d812451a99fa6d80f1bfaeae8180a84eed3d55bcf1761e6d422178b456ee565eb4897521d253e2b5c659fc6f1e897d6cb5e7f053a985829d62498e56609e06e02185d4d4b5847c8c6cbb723352b19307c570ee86df6d89c7440a59e621554c9c577817150984adadf0a4d1336311af4677d9ff2c94b0cc4980985ef3374a570867b9b3c0e1995cac6f9c152c73c04bbe341dc93d76b8388ed44f5e3ae445b96d18529f107b03ed98bfc9b3ebffb97030d4bba2bf8264ad23b2f3673b4d317cab85fd574518cc3a05e7a1f0f2ee4c13f239033f62144e77bfa567011be4e2b899e5bbf0fcb05291684b525dc74565240e69277e01f085a64ab92e8512c9137a71e6b5e614bfb432f79fb0ad1eb1c5c3fd9f15e970183a903543b58523b694659b20ad89d19b6185e99fc50b41b46e7c37a23b1f614005841f5d4de1963934a8c1eac64a18a5dcfbf348ba3dc9858768f82fb3c24f285381c9c2b8dd025bdb60e390cf6bfeb313c3b0abf2250800f5cf362899ccf9dd66b29bd9d751c1f6fa49f7b26a11153020eed03ce91ddd5dc47712876c05887f6b2d6b258f54408adff32c92afef877feaf8f8eb9889f96764ec80b1b4a3856b9940c362fbc36ec14cba80d8a43491553fd8961927a1d9be9367b6bb02190e74e37c9c39582461acaffe2ca3be8ef87bcdf5b0615c2fbdc1d5c104f4749e22a0be36d071ba68fbe1e26b2ac5e4f00a9b7dcb5739685745137526d032ef24adaefcd24546f491013aa19ff0bdc549c4a09a397f9d97c42ca8a219e07f74bb089ed52fb2eea079ad4a4d80910e8c13073672619acdc163dc8053b3ff90b5949ef075cfacc1640a4483d451410a64de6c3995d4738961675e82f41a4e20e67c6d64c18115d214a67be6675473bfadbb9f5dc02c78f5c646705b6466ffefa2bdbaaab2be5119bb4f7e7b64b498a85c30bb0cfbf78a1697c2b6f22dd7b89d7136bee4f9a23d03358ebb5eb3f13408c8d9ad0a09373178442f36706083325ac7d0d9522179593e782ae914059bdf706ec30aa7c18fdc285e849821e86e224a6cfc05b0b45cd9ffbf8703f37b32e957838519368e46e69a259668b562234fe67894727f48a17e5a909394869020acdd9a343d79d8f2b9e737f78f4d4e93d903fd276e132859ded6aeb3a90f613bffac60617b5b204d7b054c77bf027e5bf9b87c8e139cdccd2ab942d42ce00ac5aab576da4453236d5f6d7e82bc1a47c1e056f3d4f6a6d9cb28390e851df2e88f3aebaac817deeabb10dadd666aea629ef6aedf1f0ba4e1df79c6e75c8fa5042641b639bb5387a6a6071b4784d505d45cd45c7aab691e9eb5ba42e39a1e8253017888097fe9c2b8aa5e2f284d8fa11dfa19ddc5c2b713cca50108ca062620ca68359c7bed00fa30f1a6424c4578ad9b28233b75e73275d52cb56b7c9f0f781504f0d239f46be0a9bd387289b8fe68e00bf4adfb08e0a27741b9e26d9457a56fe2fbf41b19e9a247decaa5fc7a4227ee46dbbee6a8a920e6653c120ba9942f3b7b478792e5a33c18d8cb2af65c757ed06620743a9", 0x1000}, {&(0x7f0000002dc0)="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", 0x1000}], 0x9, &(0x7f0000003e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x3}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}], 0x88}}], 0x3, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) setitimer(0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x62040200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 1m42.5444957s ago: executing program 1 (id=5890): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x3}, {0x0}, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/123, 0x7b}, {&(0x7f0000002f40)=""/189, 0xbd}], 0x3, 0x40, 0x4}}], 0x48}, 0x0) 1m42.525457762s ago: executing program 1 (id=5893): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x67a, 0x8, @empty, @private2, 0x20, 0x80, 0x9, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x80000000, 0x8, 0x20, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x29f1, 0x4, 0x4, 0x4, 0x1, 0x0, 0x8, 0xcc97bc8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x0, 0xfffffffc}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m41.322486591s ago: executing program 1 (id=5922): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c000180"], 0x150}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$qrtr(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002100)="f20fe54a", 0x4}], 0x1, &(0x7f0000002200)=[{0x10, 0x84, 0x1000}, {0x10, 0x1, 0x10001}], 0x20, 0x1}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000980)={0xa, 0x2, 0x400, @loopback, 0xfffffffd}, 0x71) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) shutdown(r2, 0x2) sendto$inet6(r2, &(0x7f0000000740)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600050001", 0x37}], 0x1}, 0x200000e4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4865, 0x20, 0x1, 0xc1, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) 1m40.784738345s ago: executing program 1 (id=5929): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000d40)="$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") ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff3b2a, 0x9}}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000d00)=ANY=[@ANYBLOB="240000000714010027bd7000fcdbdf2508004400", @ANYRES32=r1, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x40008c0) openat(0xffffffffffffff9c, &(0x7f0000006540)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='devfreq_monitor\x00'}, 0x18) arch_prctl$ARCH_GET_CPUID(0x1011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setpriority(0x2, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=0x0, @ANYRES32=r9, @ANYRESDEC, @ANYRES16, @ANYRES32=r6, @ANYRESOCT=r8, @ANYRESOCT=r5, @ANYRESDEC=r7, @ANYRES8=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000040), &(0x7f00000002c0)=r10}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) 1m40.543714535s ago: executing program 1 (id=5933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 12.124867685s ago: executing program 1 (id=5942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x3, 0x16, 0x28, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0x13, 0xc0, [@multicast2, @multicast1, @multicast1, @empty]}]}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600)={[], [{@euid_eq}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '^\''}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") 12.124679245s ago: executing program 33 (id=5942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x3, 0x16, 0x28, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0x13, 0xc0, [@multicast2, @multicast1, @multicast1, @empty]}]}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600)={[], [{@euid_eq}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '^\''}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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") 1.931544505s ago: executing program 4 (id=6152): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 1.539781186s ago: executing program 0 (id=6161): fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 993.34595ms ago: executing program 4 (id=6169): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f81cffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)={0x9, 0x1ee, 0x3, 0x10, 0x7, 0x0, [{0x40, 0x6, 0x5d1de158, '\x00', 0x2086}, {0x2, 0x8, 0x7, '\x00', 0x308}, {0x86, 0x6, 0x7, '\x00', 0x200}, {0x800, 0xfffffffffffff428, 0x80000, '\x00', 0x3600}, {0xee88, 0x6, 0x2, '\x00', 0x1800}, {0x100000000, 0xd31, 0x0, '\x00', 0x804}, {0x7, 0x0, 0x7f, '\x00', 0x8}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0xa}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000640)="00b54f", 0x3, 0xffffffffffffffff) 890.550699ms ago: executing program 4 (id=6176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0x7ffffffd}, {0x1000, 0x81, 0x0, 0x9}]}) 863.63753ms ago: executing program 4 (id=6178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"384d749768ae86ce38bf1b8fb372050e44d9106b437b84d30a728f00add43e471448cf18f09cbda12d4aff26acf5af91b5b36a2beedf2369ff69f75d9d60449bbe7193062693ea20c1b9be15ed434acfbdb3934a7de22c8e390be8da42ca9a8befc469db8645492ef6671266901f697407d8ebdd89cef4eb39cedf4306e631e96b65261249f2d8118364a96386a3b849a91858e896f60837ffa98e6819d367f64673e54165c54e20b947dd7cdd14f29e9486d808c6145ec83ad37c0e70ce436c766aa2213d259324558c782bf07ea302399696427800aec7f07c4a2add589579e4e8eb1804fc0d35740b102179a0556a2cd05fb0041fa23c0d4e29e60cb93aa8766a343ff84387a608318f6668e446d2d42b1fab914b581efdc61d24bdcc5b31af29515559b6c090993c6b2c915836b21db5817cedb4e8178e453aa4b2f38993e4668b6d71a12f8ec647dd4d9525492b32ce56a4a822c40d9b4095b9a479a86371a953f94f563e425772a26258eb02e9e6092603c25959814c2f76a98316a2febc9f542ce4f186ceb37314fe233132f9015d86926d8434f12970c1659271b32bfaef89a29e429a300c40195742cb548a08b68626c488c9f43f47160d54414d3b551a392a25384083e838e42a185c314ae987f6fda7e460de295b5b4b44455b9b4febd1ddfd1f0679bebd387a527ff73da64eaab87a7c9a25ab2c13509146b34a3398071d24985ff951ac2bca478566805e6dbfd903b7a9e9d322aa892fa4d5f68640757206c5ba7edb075163c5b59f59b148120692ade67d7d9335daebcf4720af37c5f7c9de59aa60b26cb16dd0ea7bc583620a980241080d88c08df38f268178a766be532ff1fdcdb6d0492ca987ed3c81159674d42948b4e673503697321631b622179f80fb86cb4c56229e32a857b226cb420c085b8538aad1b15e67ccf06b9563ac2658a5f5aae785aea9dd4171df8d3a0685cbd0d33bf51a5b21dd57434e71910c6c0db6bf5c52aea72cbeb5551340f7c3f919237a51c87beb1049469cb00f9a40ef7ff6e343d2bfe1effd8f04b3a8d467d4055706224c25524eba763db08b900f7ec89c546d89a9f06483e547d10ca1ce32836099cdcebb9c988af2ddea008ffcff96dbfe764c4e9a07d3a60e8c1d83ed73b48cabfa26312fbb5b2e84429c611603a0e25b898eb5af7a403973f10fe8ca176c1a67f98998786ba77861e5f9c25a4d20a84a3a9dee28713962faad9853f80aab4defc3eada8e1687da37168dd66e4d3564c385201304a96d494fccb3320fcb87978acc05f0091528c68cbe3e943ce33b9721cd15f866d7a893ffbfc1390ccfea6640363fa129285141b21b33878a5dc30d2846de58734624c73e4c75745465c68e02efd2fb31bdcfbd72f4686cdcb57fe8d6ed65c69f1d424348f937a207c524711f5404375153a32989f43c4b72a96e3564463ca3681da2447ef336b2559747bddc9b8496fe32b2bf3a610a36c606720649d2b2f8d3f8cad5db64e0fe36e15f75055ad19793df636ff6fa5dfa800d792d4b6832a084aeb398d4d3ec55db939dc58e889cde46f52e8b6d0cf82c0d6277656c142454e0fed127d6cea5d3c512f7097c6de4261ecd4630e93b220a59bdc52929f6154da043b6e18b802894691b33b3e156bafafed4f08ef88791abfced2532f73c38b75dd9ffa48b0f20482d3e2543a4a98da2ebf6fd2a0ca725808c3bc0e733f70688cdd3b03f7e3330cafc5e870cc20eb92f8f0a793af9f46e8c14d4614d5a4e45f49a6466277099bfaa78e410052081bf172506ea33aedd5de4c8606a1a1b07d9b3e02f941408172e43d03e7a4271596197c54575e693ef85421f624d061a2e492bc3bce807d37a59ce2fe029ec58114e9d081d3f6786ebfe21eeb6d842b8d719b386906f68229ecec5ce86647f4f988d84ef3e25f1496063fbd4a430f23218318d42cada765c79aec75f90c311333ad0c0ec6bf0af12d75da2d25cedf580c8bb7f2ef27355bc06be107d0d4a70244f274409fc723a2328e13f9709fe8f3d700c69753e0d647f076f5bc268078d2b81d5b1220451608985d27b964de76f7d4298b5142558f8d7a4fa1d8a3789afab1ed2949e54ade7550b0a9f1731c34a91e322bed8fc53c906ac277e579c6ceb195f3f4e0ac32af2e5ae2efb8eb47b31d2357926eece9aeaf26f176ab3b3c6ab505ba803db3271462f3b9eb8a1934ca2884fb1d4dee90cb3330964daa8e5f150f6ed2a7be9927a5bfc3be73584aec900dabed8edbb4b608760bd8d06e61227f896bd0f6b0629baf85c5fea416e3dbbc8c68b3cf5a29283a3e58013b9931c620c8eb6ae2fc0f58914d767b075cdd1970ce3e532a3b9b741cb13f3d5948331d1f250515f4e5e92616a4f1a003e1df73a96d856f0abf3bd94470d107ebdd235ce8d17da4e525fa3c97b7178347cbd39ce73a250d5b5aff42c282f2f58988e8d5763dc6269b7825b564133faaf53db5061b2a6c06c72d8543539677ea074ba4be5a5a04cdd2092c98a4b519757236b7dce642852179c280967b60206f65c3ab4f720db5fd8651cecf8a69118f0a3a5749bfaa257e476d68b71ef7a5f069a17289f0fb1427f40df582406a8a29578ae0a324b9f3be2c4e04fb9eaf4bbe5601994b4e98299d6fdf3a57e0e65bea15666512c43ff7070ef9b9b3ec2108ba3ba80e97f2d212723023b177816936ac2321ce0237d3ad7e272eca8fd5c8f3035e055f7beef1e31833bc1f91ec7b71214c44a5c748aca6905e6dfcdfa84091edfcfc582778a2e66dbdfea18aedea8710c5261022801a54967911c391925f41f3f930d804a01ae7211c220a0a33eff8dd12af47b83d72c97e197a9f6b11248f20a2d6126c08501ce05766e4a8f596249bd387db9da2315acb6525ea02e0953c0f2198c730afae6fd0339a1796af13bd5828ca9212375627415ec8b75e4d04a8c357adb2e24461974eb83ca8473c7fa85ff1dccda7231f2d300573c32212ab2d020ed141bf64cabde8aec880a429f9823b7741495c6861ffcbfc5cb8e8f707e7c2855092dfc7d9ea8744c220ce26dfeae44444ecc8b077dd3fc02ec48cbab20f7446b180d31196a6453cb056703f9977766ba8f1ef898aef61e3e8621807e844419fbd671540b48d9d40c1099c657e3f3604e0c804a3d166b5b7d726dbc935ebb2b9f6ec40eb6b854792787a64ef18ca5940c65a48d2de6e016ca7a616bb731d521555bc66ed3298be640290a60012c483028249cbc99dcf179f93303919d69e006906e4c46f1fd63ff15f6281b9f82873db0535ae7ac4abcb2b32ecea29920936d101a018500d8cb2b9848e1b718cafadf11ca3de1ca0786e7c4d700bedb459bf9b968b27f137dcff39321c77e72c109f38b6be37f1e9ec27bb3f6f0c144a58f7ff1280cb6a2e5f761dcb1c43420886e1fcec9a5289fd4821e4bd794fb5dcd05495b6deedb3c49fc13dc5a104e744eb570f3754a59d0554c29331abe51f8b57dd77f4e43087a3284f412e30530e53d269a804c03b4547cb8c96fa74e5cd6e287aee0378bae6c653a6d9795eb844ffe21ee47809141498e9ac665d08402de22c285ea032394ab5f691bd7c3982922ca46996bb1d051383d2e72c60e248e6a1f0c17f6aa9b26ebffb7d16412e2e23a0f76336793964dec3a65f41c4f0f4e10bec11b4a309d5c951f5b7ed353d20da227f2be618c9dd9b198ba63d58ff9f4ff0ad52740378bc2e2980dfc560e6759202403d3767342d594c0342252334fd1d233b42380ff75dd651ba1fc1d2d61e2fc1a281c29124c821816fbe4ed5295957facbee9fbfdeeeb4114c005e9d04b5bf6e2cc221636df1fce104a53500f7c3a00446ea3840e6b9705aee039b23e5d5eea1b6cf2eb1415c92876f24abfa07375af62667ca4ad498053fcf005ec7b89bc5b8527ccfdadc2922b3f623d59df6197a446438c0655b1aaabade265cbccd37e9a55887d1409fbbb42a17da7a2f94417ae67e34170dd05db9912113b8260d57b725d7f5a2376f4d83d565b3543d2ce7640f53a15a12ba14d0540b48d7bc29d00dbb653ce80efbecb42763526f835bf8a3e7848471a28fa71023c7efa8ddff0fa21483bfe4bddf4249fd31206305aa004c3012a9441c3b934d3f8bf49187a4fee535a716576dbe6222821ce542bebcffb03908738362a974c5ae442932dce09ad5f798cd0b438deb9f3c8fc84dde98e26a191dc868ac8b6f39d9e03dd75178eeffc0a38fa0e688e8a35c72a9330a2ffa2047a9a5d1bf8cbb7af1fd8cefb84d593fe1d81344649d6e954d51b3cdd8077e68960cf8339eb88ffdc27533e97692ed6e55ab7370251ae81fff8d715808a1ecc33182c07cb571176edc795908ba7292a54d502638e73925a5751dc81e2d0bdab5efa0c6091af25613e77c3f2cb2e561e7461e48196336debdba006195d00c47c229d3b3dd2a483692aac910dea915ee2548411b4f8ea7933ae31af4509b16e5a1a2d6031a8e603df2456a47719133cdb1339349227d810a66f38eddc9928c85fad1475bc9613377b4184a0a1a8fef87122f54fe9c4d40448e41448172226c309b735a0cd0740fbc05200c453934443af4aa56553facd9e4ab4d2c05511c4e86022b12db9f98445f4a5d7c447c09184fcbc2c96c470677ae3ceaa04c62190195440bd077d32343518fd14db040c28dc6dc95683e5b9190b570f267ba44d14a42f1b53fd3b456de8b330df328954dde809e79f0a181ce12139ecdf115530fe1dd88cba51a711d8f4e5574856c8fd6b8c183185c6090d544250a1a0b41dd22dc5fb65b7eeead648de1999bd05d2e6317e5fd1ab1b4f46ce5fc50ba85434062ea80d4938c68292fec61245bf6d31a5de2de0b89a8884a89dbf4135808ce849e8897dd04d4fd6bec92516e623c5689e3728a31500e2f6ab54df7af177aa99d7678837e96b3c6911bf450785630fd5f61221e451f333ecaafc649a946407f5ad344906b17439a616b4027143731bd9d060b23cba9316a494e0a66d15732cef338f8c888d4365cdee08b3d4c8103e31952b3e79cecd8dbbb611ed29e0fa99b8ee9b4e7dfea5dd0eae6f0da8f51304f0bcdb03a039544d0ca3d4f71d7b5a73622c547fed8382fd2511e798d059c5ae0dda05921cf60eef97f1e7c148bb7284344874521679000800f496541e78f4de4c870003aa551ceef03b85c9dd1270d3865c05fdb277feb2e6a758444d8da038e0dc3058fde24c9c54f624581e6422414f01628a8bdbc4fa1933cdfefeb8f97258169f06fedeb5cfe6092bb401b7ec3d226962b34b41513db49a2ebd0a278384942a3549ddbcfb1f34548af2f33934a81887656d3b12b124dcd3aedb89f139db2108ea0f5d40e506607f275a71aa304fb50198c05f503050acb8cb5be7f1b615d4ed2c01af7ddd2c29a1f35197e9112761585834f6af6f9b95fbb2d23f2aa54d2cfd324a992363f8d7db4dbac17ab66915b4a43c2651670d4790e9c89df440a233f4b0513b191a466d8c8bcb667b5e8bd09df35ad3d9fe8c22cc27ffbf5d9677905c25e21b6dfce6c21a00ed6445f4992c612b2f1ffe5358345e2438fabd44fa2763450fe4528117cfc8c891312d9ff669def909e5b833f3ad2cea09af66bbea3fbb8e7bbc11a2ce086e751e9f9e6d164585dc9a6bb6cd9fa52ee7444dbfbdbe2453e8c284f65ca18482faf4c9b27bb88bc3d3439315827eb1331a9d38b3a6664df7b44525d69a36cc7993ef11097e2125099267e0aa90bbc429a53e40956f99eeec2a3cd65f33", 0x1000}}, 0x1006) sendfile(r0, r0, 0x0, 0x101) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff85550dd6be69bbd50000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r7) 780.281958ms ago: executing program 4 (id=6180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 742.67022ms ago: executing program 4 (id=6181): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095f5f6b3b6f0a025ce06f3e216a239704e22a73370e5f005b001280aff09345b512bccf6fa4744e9f5841126523b81fb6a98f26afef4e711b971c7375e9382336b15cf077e05fa4257b935b1e08eb13651807743418150f8277b6ae3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f00000001b00130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a0000000000000006000000000000000000000000000000000000000000000003000000000000000000f991320faf129bc032506bf353e981a400000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd700000000000020001002800000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 653.826707ms ago: executing program 5 (id=6184): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f81cffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)={0x9, 0x1ee, 0x3, 0x10, 0x7, 0x0, [{0x40, 0x6, 0x5d1de158, '\x00', 0x2086}, {0x2, 0x8, 0x7, '\x00', 0x308}, {0x86, 0x6, 0x7, '\x00', 0x200}, {0x800, 0xfffffffffffff428, 0x80000, '\x00', 0x3600}, {0xee88, 0x6, 0x2, '\x00', 0x1800}, {0x100000000, 0xd31, 0x0, '\x00', 0x804}, {0x7, 0x0, 0x7f, '\x00', 0x8}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0xa}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000640)="00b54f", 0x3, 0xffffffffffffffff) 617.570911ms ago: executing program 0 (id=6185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) clock_getres(0x4, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10004}, 0x24044808) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 617.070881ms ago: executing program 2 (id=6186): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='asymmetric\x00', 0x0) 531.249568ms ago: executing program 2 (id=6187): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x402) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 530.731848ms ago: executing program 5 (id=6188): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x5, @remote, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="ab", 0x1}], 0x1}}], 0x1, 0x448d4) 480.336821ms ago: executing program 5 (id=6189): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='asymmetric\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x5, 0x2, 0x29}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) 469.648662ms ago: executing program 2 (id=6190): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff030000000000009bb2000000850000008a00ba6c0000950000000000ede931c812c404cec62bed16f771294e4bca9660d78da20b618b96a8ea0e4fa9c42c90d906b6617972e1973586408993d213acca706502ede209b72c6a32e9a82c7e"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x16) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file2\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 458.654823ms ago: executing program 5 (id=6191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 440.199534ms ago: executing program 2 (id=6192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 389.088519ms ago: executing program 5 (id=6193): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x0, 0x0, 0x100213}, &(0x7f0000000540)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) timer_create(0x4, &(0x7f0000000300)={0x0, 0xd, 0x2, @thr={0x0, &(0x7f0000000440)="4be8e119f66c31e1b9bb4520786bfafcf05d3e0fae72c443ec8477e2025b62176431a7e189d495d6617a57de5fbd6c2fa6acb4d8ae26b4615f3dc15337e8b81c32fe9e9c100cc2decfd458e1c883c90a370cd1faa26dfa8a7e15a1980fec1a79954790f9bbb8e8022d1a021d5be92961719f35ab0070e2f4315962bf8a6b113a2fb87f873ae057c8e995d61a664305e804269039605ac5f00667bbc4997bac69ebe3fdbf27cfc67b4b24fcd8"}}, &(0x7f0000000500)=0x0) timer_settime(r6, 0x1, &(0x7f0000000580)={{0x0, 0x3938700}}, &(0x7f00000005c0)) socket(0x200000100000011, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) socket$inet6(0xa, 0x3, 0x8000000003c) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r8, 0x6e2, 0x600, 0x1, 0x0, 0x0) 361.426481ms ago: executing program 6 (id=6194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) 326.181514ms ago: executing program 5 (id=6195): fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 248.70902ms ago: executing program 2 (id=6196): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x6, 0x1001}}) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) pipe2(&(0x7f0000000040), 0x80000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x5}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 170.226296ms ago: executing program 0 (id=6197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='asymmetric\x00', 0x0) 157.423287ms ago: executing program 6 (id=6198): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 136.521769ms ago: executing program 6 (id=6199): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) 116.478281ms ago: executing program 6 (id=6200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 86.134553ms ago: executing program 6 (id=6201): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={0x0, r1, 0x0, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x8, 0x2007, @fd, 0x6, 0x0, 0x0, 0x25}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r3}}]}, 0x28}}, 0x0) 81.125713ms ago: executing program 0 (id=6202): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000a00000000000000000000000000000000817a2a801ed4fb81d61a54629cfa77d961b7b36f7d2887c518dc1edb46abec84aa2af259352873b768ec00531e5c415f263e367f8daad95059f44c8329058c9697081d6d569497b854a98f214f0e02227eab6812b975fc1b5faad17101bf881a6a5685e533a4d9f6d2f5b72341c923579d83a1117d7132f1ac97762aeb13ada9ae9222fc6d2e1c"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) socket$inet_sctp(0x2, 0x5, 0x84) creat(0x0, 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 57.877615ms ago: executing program 0 (id=6203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 51.818056ms ago: executing program 2 (id=6204): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x11080, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0xfb, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x3}) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x6}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.240778ms ago: executing program 6 (id=6205): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x75b, &(0x7f0000000840)="$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") r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r2, 0x8910, 0xbffffffffffffffb) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xffffffffffffa9ea, 0x5, 0x8000000000000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18654, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) sync() write$UHID_DESTROY(r3, &(0x7f0000001200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x204003, &(0x7f00000013c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x7fffffffffffffff}}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xb2c}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffb}}, {@timeout={'timeout', 0x3d, 0x81}}], [{@subj_role}, {@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/tcp_wmem\x00'}}, {@fowner_gt={'fowner>', r9}}]}}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x4) 0s ago: executing program 0 (id=6206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): key+0x263/0x350 [ 332.566564][T18518] __x64_sys_add_key+0x67/0x80 [ 332.566585][T18518] x64_sys_call+0x28c4/0x2ff0 [ 332.566661][T18518] do_syscall_64+0xd2/0x200 [ 332.566695][T18518] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.566764][T18518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.566793][T18518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.566866][T18518] RIP: 0033:0x7fa3bc2debe9 [ 332.566885][T18518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.566908][T18518] RSP: 002b:00007fa3bad47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 332.566927][T18518] RAX: ffffffffffffffda RBX: 00007fa3bc505fa0 RCX: 00007fa3bc2debe9 [ 332.566939][T18518] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000540 [ 332.566991][T18518] RBP: 00007fa3bad47090 R08: ffffffffffffffff R09: 0000000000000000 [ 332.567007][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.567022][T18518] R13: 00007fa3bc506038 R14: 00007fa3bc505fa0 R15: 00007fff7e60e0a8 [ 332.567044][T18518] [ 332.768851][T18514] 9pnet_fd: Insufficient options for proto=fd [ 332.793768][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5274'. [ 332.856006][T18530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 332.908250][T18536] 9pnet_fd: Insufficient options for proto=fd [ 332.930811][T18538] erspan0: refused to change device tx_queue_len [ 333.006751][T18549] validate_nla: 7 callbacks suppressed [ 333.006771][T18549] netlink: 'syz.4.5287': attribute type 27 has an invalid length. [ 333.020954][T18549] macsec0: left allmulticast mode [ 333.028003][T18554] 9pnet_fd: Insufficient options for proto=fd [ 333.030267][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.034221][T18549] bond8: left promiscuous mode [ 333.055340][T18549] bond10: left promiscuous mode [ 333.056059][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.095034][T18559] netlink: 'syz.4.5291': attribute type 27 has an invalid length. [ 333.098849][T18561] netlink: 'syz.1.5290': attribute type 1 has an invalid length. [ 333.124283][T18563] netlink: 'syz.4.5292': attribute type 1 has an invalid length. [ 333.137700][T18561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.154435][T18563] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.176007][T18561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.183796][T18561] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.195886][T18561] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 333.205374][T18571] 9pnet_fd: Insufficient options for proto=fd [ 333.219863][T18563] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.227182][T18563] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.239458][T18563] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 333.256360][T18572] bond4: entered promiscuous mode [ 333.262560][T18572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.272397][T18572] bond3: (slave bond4): Enslaving as an active interface with a down link [ 333.287437][T18575] bond12: entered promiscuous mode [ 333.293539][T18575] 8021q: adding VLAN 0 to HW filter on device bond12 [ 333.302476][T18575] bond11: (slave bond12): Enslaving as an active interface with a down link [ 333.422475][T18591] netlink: 'syz.4.5301': attribute type 27 has an invalid length. [ 333.449089][T18591] bond12: left promiscuous mode [ 333.557472][T18600] netlink: 'syz.1.5304': attribute type 13 has an invalid length. [ 333.566152][T18600] erspan0: refused to change device tx_queue_len [ 333.593948][T18603] 9pnet_fd: Insufficient options for proto=fd [ 333.610779][T18607] netlink: 'syz.5.5308': attribute type 1 has an invalid length. [ 333.629200][T18609] loop1: detected capacity change from 0 to 128 [ 333.647153][T18607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.656471][T18609] netlink: 'syz.1.5309': attribute type 21 has an invalid length. [ 333.659563][T18612] 9pnet_fd: Insufficient options for proto=fd [ 333.702963][T18607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.741251][T18607] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.753017][T18607] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 333.791976][T18616] bond4: entered promiscuous mode [ 333.798299][T18616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.809269][T18616] bond3: (slave bond4): Enslaving as an active interface with a down link [ 333.818322][T18618] netlink: 'syz.0.5313': attribute type 27 has an invalid length. [ 333.826710][T18623] 9pnet_fd: Insufficient options for proto=fd [ 333.910563][T18631] loop5: detected capacity change from 0 to 512 [ 333.946968][T18631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.966134][T18631] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.986057][T18641] netlink: 'syz.2.5321': attribute type 13 has an invalid length. [ 334.008420][T18641] erspan0: refused to change device tx_queue_len [ 334.041843][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.112407][T18648] loop5: detected capacity change from 0 to 128 [ 334.131583][T18652] 9pnet_fd: Insufficient options for proto=fd [ 334.170722][T18656] bond4: left promiscuous mode [ 334.199408][T18654] loop0: detected capacity change from 0 to 512 [ 334.224286][T18660] bond2: left promiscuous mode [ 334.229788][T18660] bond4: left promiscuous mode [ 334.241097][T18662] loop1: detected capacity change from 0 to 164 [ 334.276935][T18662] iso9660: Unknown parameter '' [ 334.289131][T18654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.319087][T18654] ext4 filesystem being mounted at /563/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.359928][T18654] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 334.392713][T18654] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 334.405562][T18654] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 334.462610][T18654] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 334.493063][T18684] 9pnet_fd: Insufficient options for proto=fd [ 334.529695][T18686] can0: slcan on ttyS3. [ 334.548687][T11245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.592803][T18695] loop5: detected capacity change from 0 to 512 [ 334.631630][T18695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.654896][T18695] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.693299][T18686] can0 (unregistered): slcan off ttyS3. [ 334.710824][T18699] can0: slcan on ttyS3. [ 334.722485][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.745284][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 334.745301][ T29] audit: type=1400 audit(1756235367.577:27665): avc: denied { connect } for pid=18689 comm="syz.4.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 334.773656][T18700] 9pnet_fd: Insufficient options for proto=fd [ 334.782033][ T29] audit: type=1400 audit(1756235367.577:27666): avc: denied { name_connect } for pid=18689 comm="syz.4.5342" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 334.804682][ T29] audit: type=1400 audit(1756235367.605:27667): avc: denied { mounton } for pid=18689 comm="syz.4.5342" path="/syzcgroup/net/syz4/devices.allow" dev="cgroup" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 334.851164][T18685] can0 (unregistered): slcan off ttyS3. [ 334.917101][T18716] FAULT_INJECTION: forcing a failure. [ 334.917101][T18716] name failslab, interval 1, probability 0, space 0, times 0 [ 334.930330][T18716] CPU: 1 UID: 0 PID: 18716 Comm: syz.5.5351 Not tainted syzkaller #0 PREEMPT(voluntary) [ 334.930369][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.930385][T18716] Call Trace: [ 334.930393][T18716] [ 334.930403][T18716] __dump_stack+0x1d/0x30 [ 334.930428][T18716] dump_stack_lvl+0xe8/0x140 [ 334.930472][T18716] dump_stack+0x15/0x1b [ 334.930489][T18716] should_fail_ex+0x265/0x280 [ 334.930513][T18716] should_failslab+0x8c/0xb0 [ 334.930540][T18716] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 334.930576][T18716] ? shmem_alloc_inode+0x34/0x50 [ 334.930651][T18716] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 334.930677][T18716] shmem_alloc_inode+0x34/0x50 [ 334.930752][T18716] alloc_inode+0x40/0x170 [ 334.930779][T18716] new_inode+0x1d/0xe0 [ 334.930835][T18716] shmem_get_inode+0x244/0x750 [ 334.930864][T18716] __shmem_file_setup+0x113/0x210 [ 334.930900][T18716] shmem_file_setup+0x3b/0x50 [ 334.930978][T18716] __se_sys_memfd_create+0x2c3/0x590 [ 334.931069][T18716] __x64_sys_memfd_create+0x31/0x40 [ 334.931092][T18716] x64_sys_call+0x2abe/0x2ff0 [ 334.931122][T18716] do_syscall_64+0xd2/0x200 [ 334.931155][T18716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.931202][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.931286][T18716] RIP: 0033:0x7fb62d7eebe9 [ 334.931303][T18716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.931321][T18716] RSP: 002b:00007fb62c24ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 334.931339][T18716] RAX: ffffffffffffffda RBX: 000000000000063d RCX: 00007fb62d7eebe9 [ 334.931352][T18716] RDX: 00007fb62c24eef0 RSI: 0000000000000000 RDI: 00007fb62d8727e8 [ 334.931368][T18716] RBP: 0000200000000f80 R08: 00007fb62c24ebb7 R09: 00007fb62c24ee40 [ 334.931383][T18716] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 334.931443][T18716] R13: 00007fb62c24eef0 R14: 00007fb62c24eeb0 R15: 0000200000002240 [ 334.931483][T18716] [ 334.934232][ T29] audit: type=1400 audit(1756235367.748:27668): avc: denied { mounton } for pid=18713 comm="syz.2.5350" path="/425/file0" dev="tmpfs" ino=2290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 335.072620][T18720] loop5: detected capacity change from 0 to 512 [ 335.198388][ T29] audit: type=1326 audit(1756235368.000:27669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.223377][T18720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.236345][T18702] loop0: detected capacity change from 0 to 512 [ 335.243224][ T29] audit: type=1326 audit(1756235368.000:27670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.256178][T18720] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.266906][ T29] audit: type=1326 audit(1756235368.000:27671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.284540][T18702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.300996][ T29] audit: type=1326 audit(1756235368.000:27672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.334537][ T29] audit: type=1326 audit(1756235368.000:27673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.345474][T18720] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 335.358154][ T29] audit: type=1326 audit(1756235368.000:27674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 335.375795][T18720] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 335.405539][T18702] EXT4-fs (loop0): 1 truncate cleaned up [ 335.411731][T18720] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 335.414041][T18702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.430722][T18720] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 335.439088][T18702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.550979][T18736] __nla_validate_parse: 19 callbacks suppressed [ 335.550995][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5357'. [ 335.593070][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.915392][T18755] 9pnet_fd: Insufficient options for proto=fd [ 335.937514][T18756] lo speed is unknown, defaulting to 1000 [ 336.238844][T18739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.297436][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5370'. [ 336.323727][T18739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.470645][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5343'. [ 336.479793][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5343'. [ 336.489654][T18773] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5371'. [ 336.510661][T18773] erspan0: refused to change device tx_queue_len [ 336.723881][T18779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.734843][T18779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.057186][ T9] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 337.066664][ T9] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.03 Device [syz0] on syz0 [ 337.096799][T18807] fido_id[18807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 337.135685][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5384'. [ 337.197439][T18815] loop5: detected capacity change from 0 to 512 [ 337.218540][T18815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.238379][T18815] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.273216][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.472302][T18828] lo speed is unknown, defaulting to 1000 [ 337.564860][T18826] loop5: detected capacity change from 0 to 512 [ 337.677839][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 337.715095][T18831] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5392'. [ 337.934342][T18826] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 337.953841][T18826] EXT4-fs (loop5): orphan cleanup on readonly fs [ 337.955436][T18840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.972864][T18840] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.974899][T18826] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5391: Failed to acquire dquot type 1 [ 337.992109][T18840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.000372][T18826] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5391: bg 0: block 40: padding at end of block bitmap is not set [ 338.007767][T18300] lo speed is unknown, defaulting to 1000 [ 338.024047][T18826] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 338.027668][T18300] syz0: Port: 1 Link ACTIVE [ 338.058407][T18826] EXT4-fs (loop5): 1 truncate cleaned up [ 338.064529][T18826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.123387][T18826] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.5391: corrupted xattr block 31: invalid header [ 338.271227][T18855] tun0: tun_chr_ioctl cmd 1074025677 [ 338.276782][T18855] tun0: linktype set to 774 [ 338.277764][T18826] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 338.292750][T18858] 9pnet_fd: Insufficient options for proto=fd [ 338.308396][T18826] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.5391: corrupted xattr block 31: invalid header [ 338.325629][T18863] loop0: detected capacity change from 0 to 512 [ 338.326181][T18829] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #16: comm syz.5.5391: corrupted xattr block 31: invalid header [ 338.352872][T18826] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 338.362669][T18826] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.5391: bad symlink. [ 338.374045][T18829] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 338.383354][T18829] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.5391: bad symlink. [ 338.394748][T18863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.416612][T18863] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.437045][T18867] 8021q: adding VLAN 0 to HW filter on device bond13 [ 338.448473][T11245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.458433][T18867] 8021q: adding VLAN 0 to HW filter on device bond13 [ 338.496064][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.514273][T18859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.522924][T18867] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.535846][T18859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.557941][T18867] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 338.580142][T18875] bond14: entered promiscuous mode [ 338.586378][T18875] 8021q: adding VLAN 0 to HW filter on device bond14 [ 338.595449][T18875] bond13: (slave bond14): Enslaving as an active interface with a down link [ 338.623536][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5409'. [ 338.633288][T18884] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5409'. [ 338.649520][T18885] loop0: detected capacity change from 0 to 512 [ 338.667722][T18885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.699727][T18885] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.716025][T18885] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 338.727865][T18885] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 338.746077][T18885] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 338.762396][T18885] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 338.816663][T11245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.940564][T18904] lo speed is unknown, defaulting to 1000 [ 338.996520][T18901] validate_nla: 12 callbacks suppressed [ 338.996542][T18901] netlink: 'syz.5.5417': attribute type 13 has an invalid length. [ 339.115846][T18901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.124568][T18901] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.224635][T18910] netlink: 'syz.2.5419': attribute type 13 has an invalid length. [ 339.267356][T18901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.315754][T18914] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 339.332935][T18910] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.352232][T18910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.378196][T18914] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.403649][T18918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.410958][T18918] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 339.422783][T18918] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 339.447322][T18914] macvlan2: entered promiscuous mode [ 339.452928][T18914] macvlan2: entered allmulticast mode [ 339.459116][T18914] bond5: entered promiscuous mode [ 339.464536][T18914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 339.473024][T18914] bond5: left promiscuous mode [ 339.558270][T18929] 9pnet: Could not find request transport: fd0x0000000000000004 [ 339.578667][T18931] loop0: detected capacity change from 0 to 1024 [ 339.586442][T18931] EXT4-fs: Ignoring removed orlov option [ 339.623371][T18931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.637988][T18934] random: crng reseeded on system resumption [ 339.730829][T11245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.821021][T18945] loop1: detected capacity change from 0 to 512 [ 339.833742][T18945] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 339.842303][T18945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 339.849527][T18945] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5434: Failed to acquire dquot type 1 [ 339.861661][T18945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5434: bg 0: block 40: padding at end of block bitmap is not set [ 339.876620][T18945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 339.887309][T18945] EXT4-fs (loop1): 1 truncate cleaned up [ 339.894050][T18945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.912016][T18945] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5434: corrupted xattr block 31: invalid header [ 339.925710][T18945] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 339.935214][T18945] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5434: corrupted xattr block 31: invalid header [ 339.948809][T18945] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 339.957914][T18945] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.5434: bad symlink. [ 339.968453][T18946] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5434: corrupted xattr block 31: invalid header [ 339.981926][T18946] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 339.991128][T18946] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.5434: bad symlink. [ 340.013536][T18945] tun0: tun_chr_ioctl cmd 1074025677 [ 340.020150][T18945] tun0: linktype set to 774 [ 340.072149][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.376017][T18963] loop5: detected capacity change from 0 to 512 [ 340.399827][T18963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.402266][T18970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.419618][T18970] IPv6: NLM_F_CREATE should be set when creating new route [ 340.426832][T18970] IPv6: NLM_F_CREATE should be set when creating new route [ 340.445883][T18963] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.460587][T18963] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 340.472371][T18963] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 340.484242][T18963] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 340.495992][T18963] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 340.522083][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.538931][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 340.538949][ T29] audit: type=1400 audit(1756235372.918:27964): avc: denied { bind } for pid=18975 comm="syz.5.5444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 340.566550][ T29] audit: type=1400 audit(1756235372.946:27965): avc: denied { associate } for pid=18975 comm="syz.5.5444" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.607368][ T29] audit: type=1326 audit(1756235372.983:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.632119][ T29] audit: type=1326 audit(1756235372.983:27967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.656417][ T29] audit: type=1326 audit(1756235373.011:27968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.689702][ T29] audit: type=1326 audit(1756235373.011:27969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.713674][ T29] audit: type=1326 audit(1756235373.011:27970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.737727][ T29] audit: type=1326 audit(1756235373.029:27971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.761379][ T29] audit: type=1326 audit(1756235373.029:27972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.785282][ T29] audit: type=1326 audit(1756235373.029:27973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18979 comm="syz.5.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d7eebe9 code=0x7ffc0000 [ 340.889577][T18993] 9pnet_fd: Insufficient options for proto=fd [ 340.901525][T18995] netlink: 'syz.5.5452': attribute type 1 has an invalid length. [ 340.930411][T18995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.951027][T18995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.960186][T18995] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.975653][T18995] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 341.019051][T19004] bond6: entered promiscuous mode [ 341.032131][T19004] macvlan2: entered promiscuous mode [ 341.037583][T19004] macvlan2: entered allmulticast mode [ 341.048291][T19004] bond5: entered promiscuous mode [ 341.053733][T19004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.065124][T19004] bond5: left promiscuous mode [ 341.088593][T19009] __nla_validate_parse: 4 callbacks suppressed [ 341.088611][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5457'. [ 341.170901][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5459'. [ 341.177429][T19016] 9pnet_fd: Insufficient options for proto=fd [ 341.209788][T19006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.236234][T19006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.248080][T19014] loop5: detected capacity change from 0 to 512 [ 341.266393][T19014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.279248][T19014] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.292438][T19014] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 341.300740][T19026] netlink: 'syz.0.5462': attribute type 13 has an invalid length. [ 341.304460][T19014] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 341.324083][T19014] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 341.329397][T19026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.338309][T19014] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 341.344512][T19026] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.365711][T19026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.382555][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.421016][T19032] 9pnet_fd: Insufficient options for proto=fd [ 341.519362][T19038] can0: slcan on ttyS3. [ 341.579407][T19038] can0 (unregistered): slcan off ttyS3. [ 341.592889][T19038] can0: slcan on ttyS3. [ 341.601899][T19038] netlink: 'syz.5.5468': attribute type 1 has an invalid length. [ 341.609701][T19038] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5468'. [ 341.654920][T19037] can0 (unregistered): slcan off ttyS3. [ 341.727473][T19051] loop5: detected capacity change from 0 to 512 [ 341.764570][T19051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.785557][T19051] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.818995][T19051] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 341.837078][T19051] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 341.851625][T19051] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 341.871424][T19051] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 341.933346][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.995629][T19062] loop5: detected capacity change from 0 to 1024 [ 342.032820][T19062] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 342.043815][T19062] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 342.055720][T19062] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 342.068213][T19062] EXT4-fs (loop5): invalid journal inode [ 342.074164][T19062] EXT4-fs (loop5): can't get journal size [ 342.080750][T19062] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.5476: blocks 2-2 from inode overlap system zone [ 342.097944][T19062] EXT4-fs (loop5): failed to initialize system zone (-117) [ 342.105513][T19062] EXT4-fs (loop5): mount failed [ 342.245692][T19075] 9pnet: Could not find request transport: 0xffffffffffffffff [ 342.503958][T19096] 9pnet_fd: Insufficient options for proto=fd [ 342.597897][T19094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.606949][T19094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.187665][T19122] 9pnet_fd: Insufficient options for proto=fd [ 343.212717][T19124] 9pnet_fd: Insufficient options for proto=fd [ 343.242460][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5502'. [ 343.414172][T19135] loop1: detected capacity change from 0 to 1024 [ 343.422701][T19135] EXT4-fs: Ignoring removed orlov option [ 343.502590][T19136] lo speed is unknown, defaulting to 1000 [ 343.789689][T19135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.891237][T19144] 9pnet: Could not find request transport: fd0x0000000000000004 [ 343.932540][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.046436][T19152] lo speed is unknown, defaulting to 1000 [ 344.378648][T19156] netlink: 'syz.5.5511': attribute type 1 has an invalid length. [ 344.519632][T19156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.557812][T19157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.570325][T19157] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.589284][T19157] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 344.610802][T19163] 9pnet_fd: Insufficient options for proto=fd [ 344.617752][T19166] 9pnet_fd: Insufficient options for proto=fd [ 344.629956][T19159] bond8: entered promiscuous mode [ 344.639107][T19159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.649541][T19169] futex_wake_op: syz.1.5515 tries to shift op by -1; fix this program [ 344.649711][T19159] bond7: (slave bond8): Enslaving as an active interface with a down link [ 344.675957][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5515'. [ 344.681061][T19156] macvlan2: entered promiscuous mode [ 344.690671][T19156] macvlan2: entered allmulticast mode [ 344.698204][T19156] bond7: entered promiscuous mode [ 344.703990][T19156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.773692][T19156] bond7: left promiscuous mode [ 344.897581][T19181] 9pnet_fd: Insufficient options for proto=fd [ 345.001133][T19182] lo speed is unknown, defaulting to 1000 [ 345.029209][T19182] debugfs: 'netdev@ffff888130904550' already exists in 'ref_tracker' [ 345.514152][T19185] lo speed is unknown, defaulting to 1000 [ 345.586083][T19204] loop5: detected capacity change from 0 to 512 [ 345.671543][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5528'. [ 345.681830][T19204] journal_path: Non-blockdev passed as './bus' [ 345.688386][T19204] EXT4-fs: error: could not find journal device path [ 345.754616][T19185] chnl_net:caif_netlink_parms(): no params data found [ 345.873348][T19225] futex_wake_op: syz.4.5532 tries to shift op by -1; fix this program [ 345.893881][ T336] bridge_slave_1: left allmulticast mode [ 345.899590][ T336] bridge_slave_1: left promiscuous mode [ 345.905387][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.915575][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5532'. [ 345.925269][ T336] bridge_slave_0: left allmulticast mode [ 345.930950][ T336] bridge_slave_0: left promiscuous mode [ 345.936701][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.959499][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 345.969382][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 345.969481][ T29] audit: type=1326 audit(1756235377.943:28285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 346.031906][ T29] audit: type=1326 audit(1756235377.943:28286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 346.055892][ T29] audit: type=1326 audit(1756235377.943:28287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 346.079910][ T29] audit: type=1400 audit(1756235377.943:28288): avc: denied { create } for pid=19235 comm="syz.5.5535" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.100922][ T29] audit: type=1400 audit(1756235377.943:28289): avc: denied { write } for pid=19235 comm="syz.5.5535" name="file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.123754][ T29] audit: type=1400 audit(1756235377.943:28290): avc: denied { open } for pid=19235 comm="syz.5.5535" path="/167/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.146841][ T29] audit: type=1400 audit(1756235377.943:28291): avc: denied { ioctl } for pid=19235 comm="syz.5.5535" path="/167/file0" dev="tmpfs" ino=926 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.171418][ T29] audit: type=1400 audit(1756235377.952:28292): avc: denied { wake_alarm } for pid=19227 comm="syz.1.5533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.193452][ T29] audit: type=1326 audit(1756235377.980:28293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 346.217426][ T29] audit: type=1326 audit(1756235377.980:28294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.4.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 346.269041][ T336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.278784][ T336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.288117][ T336] bond0 (unregistering): Released all slaves [ 346.297517][ T336] bond1 (unregistering): (slave bond2): Releasing active interface [ 346.320753][ T336] bond1 (unregistering): Released all slaves [ 346.330317][ T336] bond2 (unregistering): Released all slaves [ 346.352008][ T336] bond3 (unregistering): (slave bond4): Releasing active interface [ 346.368912][ T336] bond3 (unregistering): Released all slaves [ 346.391662][ T336] bond4 (unregistering): Released all slaves [ 346.422948][T19185] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.430095][T19185] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.440575][T19185] bridge_slave_0: entered allmulticast mode [ 346.449317][T19247] loop5: detected capacity change from 0 to 512 [ 346.460537][T19185] bridge_slave_0: entered promiscuous mode [ 346.477513][T19185] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.484636][T19185] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.531597][T19247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.552106][T19247] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.564609][T19185] bridge_slave_1: entered allmulticast mode [ 346.571246][T19185] bridge_slave_1: entered promiscuous mode [ 346.666078][T19247] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 346.687668][ T336] hsr_slave_0: left promiscuous mode [ 346.695175][ T336] hsr_slave_1: left promiscuous mode [ 346.710013][ T336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.719527][T19247] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 346.736739][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.752494][T19247] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 346.779819][T19247] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 346.819534][ T336] team0 (unregistering): Port device team_slave_1 removed [ 346.845358][ T336] team0 (unregistering): Port device team_slave_0 removed [ 346.847348][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.928299][T19263] can0: slcan on ttyS3. [ 346.936522][T19185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.949470][T19185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.995657][T19185] team0: Port device team_slave_0 added [ 347.008224][T19185] team0: Port device team_slave_1 added [ 347.015446][T19266] can0 (unregistered): slcan off ttyS3. [ 347.041027][T19263] can0: slcan on ttyS3. [ 347.047263][T19261] netlink: 'syz.1.5541': attribute type 1 has an invalid length. [ 347.055132][T19261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5541'. [ 347.079039][T19185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.086241][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.112202][T19185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.150626][T19185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.157806][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.183793][T19185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.212768][T19260] can0 (unregistered): slcan off ttyS3. [ 347.287080][T19185] hsr_slave_0: entered promiscuous mode [ 347.293295][T19185] hsr_slave_1: entered promiscuous mode [ 347.300396][T19185] debugfs: 'hsr0' already exists in 'hsr' [ 347.306168][T19185] Cannot create hsr debugfs directory [ 347.439684][T19272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.460743][ T336] IPVS: stop unused estimator thread 0... [ 347.477474][T19272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.853036][T19297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.939712][T19185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.948885][T19185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.958203][T19185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.967527][T19185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.022091][T19185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.040328][T19185] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.051992][ T3934] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.059144][ T3934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.073867][T19304] lo speed is unknown, defaulting to 1000 [ 348.078364][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.086795][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.222097][T19185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.286895][T19332] netlink: 'syz.4.5551': attribute type 1 has an invalid length. [ 348.315353][T19332] 8021q: adding VLAN 0 to HW filter on device bond15 [ 348.384442][T19185] veth0_vlan: entered promiscuous mode [ 348.397892][T19332] 8021q: adding VLAN 0 to HW filter on device bond15 [ 348.410013][T19332] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 348.422288][T19332] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 348.455528][T19185] veth1_vlan: entered promiscuous mode [ 348.484361][T19353] bond16: entered promiscuous mode [ 348.504419][T19185] veth0_macvtap: entered promiscuous mode [ 348.517269][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5555'. [ 348.528735][T19185] veth1_macvtap: entered promiscuous mode [ 348.586207][T19332] macvlan2: entered promiscuous mode [ 348.591623][T19332] macvlan2: entered allmulticast mode [ 348.599332][T19332] bond15: entered promiscuous mode [ 348.608612][T19332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.619026][T19332] bond15: left promiscuous mode [ 348.648779][T19185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.663364][T19185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.716847][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.732204][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.806585][ T336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.826051][T19381] 9pnet_fd: Insufficient options for proto=fd [ 348.843547][ T336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.896465][T19393] 9pnet_fd: Insufficient options for proto=fd [ 349.013897][T19403] can0: slcan on ttyS3. [ 349.120677][T19403] can0 (unregistered): slcan off ttyS3. [ 349.148418][T19399] can0: slcan on ttyS3. [ 349.156508][T19403] netlink: 'syz.5.5560': attribute type 1 has an invalid length. [ 349.164468][T19403] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5560'. [ 349.247726][T19432] blktrace: Concurrent blktraces are not allowed on loop9 [ 349.284517][T19397] can0 (unregistered): slcan off ttyS3. [ 349.362029][T19443] netlink: 'syz.4.5569': attribute type 27 has an invalid length. [ 349.376898][T19446] 9pnet_fd: Insufficient options for proto=fd [ 349.398295][T19443] bond14: left promiscuous mode [ 349.416780][T19443] bond16: left promiscuous mode [ 349.418473][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 349.431923][T19441] netlink: 'syz.5.5568': attribute type 13 has an invalid length. [ 349.463230][T19441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.595002][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.638486][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.764905][T19493] FAULT_INJECTION: forcing a failure. [ 349.764905][T19493] name failslab, interval 1, probability 0, space 0, times 0 [ 349.777673][T19493] CPU: 0 UID: 0 PID: 19493 Comm: syz.4.5577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 349.777779][T19493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.777793][T19493] Call Trace: [ 349.777802][T19493] [ 349.777811][T19493] __dump_stack+0x1d/0x30 [ 349.777848][T19493] dump_stack_lvl+0xe8/0x140 [ 349.777908][T19493] dump_stack+0x15/0x1b [ 349.777978][T19493] should_fail_ex+0x265/0x280 [ 349.778002][T19493] should_failslab+0x8c/0xb0 [ 349.778034][T19493] __kvmalloc_node_noprof+0x123/0x4e0 [ 349.778066][T19493] ? cgroup_pidlist_start+0x1cc/0x820 [ 349.778169][T19493] cgroup_pidlist_start+0x1cc/0x820 [ 349.778200][T19493] ? obj_cgroup_charge_account+0xba/0x1a0 [ 349.778281][T19493] ? __rcu_read_unlock+0x4f/0x70 [ 349.778309][T19493] cgroup_seqfile_start+0x58/0x70 [ 349.778336][T19493] kernfs_seq_start+0x80/0x130 [ 349.778386][T19493] seq_read_iter+0x279/0x940 [ 349.778423][T19493] kernfs_fop_read_iter+0xc4/0x300 [ 349.778468][T19493] ? iov_iter_bvec+0xa4/0xd0 [ 349.778540][T19493] copy_splice_read+0x442/0x660 [ 349.778566][T19493] ? __pfx_copy_splice_read+0x10/0x10 [ 349.778586][T19493] splice_direct_to_actor+0x26f/0x680 [ 349.778609][T19493] ? __pfx_direct_splice_actor+0x10/0x10 [ 349.778659][T19493] do_splice_direct+0xda/0x150 [ 349.778719][T19493] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 349.778752][T19493] do_sendfile+0x380/0x650 [ 349.778787][T19493] __x64_sys_sendfile64+0x105/0x150 [ 349.778879][T19493] x64_sys_call+0x2bb0/0x2ff0 [ 349.778937][T19493] do_syscall_64+0xd2/0x200 [ 349.779048][T19493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 349.779117][T19493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 349.779145][T19493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.779169][T19493] RIP: 0033:0x7f51c91aebe9 [ 349.779196][T19493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.779216][T19493] RSP: 002b:00007f51c7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 349.779237][T19493] RAX: ffffffffffffffda RBX: 00007f51c93d5fa0 RCX: 00007f51c91aebe9 [ 349.779251][T19493] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 349.779265][T19493] RBP: 00007f51c7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 349.779279][T19493] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 349.779293][T19493] R13: 00007f51c93d6038 R14: 00007f51c93d5fa0 R15: 00007ffd339d9e38 [ 349.779314][T19493] [ 350.119773][T19498] can0: slcan on ttyS3. [ 350.159877][T19498] can0 (unregistered): slcan off ttyS3. [ 350.179319][T19498] can0: slcan on ttyS3. [ 350.198000][T19498] netlink: 'syz.4.5578': attribute type 1 has an invalid length. [ 350.205980][T19498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5578'. [ 350.269813][T19497] can0 (unregistered): slcan off ttyS3. [ 350.308733][T19517] netlink: 'syz.2.5580': attribute type 1 has an invalid length. [ 350.325076][T19517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.344918][T19517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.352226][T19517] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.371187][T19517] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 350.403189][T19521] macvlan2: entered promiscuous mode [ 350.408591][T19521] macvlan2: entered allmulticast mode [ 350.414637][T19521] bond6: entered promiscuous mode [ 350.420589][T19521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 350.431760][T19521] bond6: left promiscuous mode [ 350.440375][T19515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.449010][T19515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.524006][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5582'. [ 350.536805][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5582'. [ 350.540598][T19530] 9pnet_fd: Insufficient options for proto=fd [ 350.569042][T19534] netlink: 'syz.0.5585': attribute type 1 has an invalid length. [ 350.634745][T19534] bond1: entered promiscuous mode [ 350.645880][T19534] macvlan2: entered promiscuous mode [ 350.651360][T19534] macvlan2: entered allmulticast mode [ 350.760394][T19542] 9pnet_fd: Insufficient options for proto=fd [ 350.812666][T19546] loop0: detected capacity change from 0 to 512 [ 350.819663][T19546] EXT4-fs: Ignoring removed bh option [ 350.825790][T19546] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.835055][T19546] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 350.845926][T19546] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 350.858343][T19546] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 350.868887][T19544] netlink: 'syz.1.5588': attribute type 13 has an invalid length. [ 350.883075][T19544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.901105][T19546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.924062][T19546] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5589: bg 0: block 353: padding at end of block bitmap is not set [ 350.976198][T19185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.172840][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5594'. [ 351.185265][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5594'. [ 351.323304][T19577] 9pnet_fd: Insufficient options for proto=fd [ 351.365806][T19583] netlink: 'syz.2.5601': attribute type 13 has an invalid length. [ 351.380527][T19583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.391239][T19586] blktrace: Concurrent blktraces are not allowed on loop11 [ 351.405554][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 351.405590][ T29] audit: type=1400 audit(1756235382.923:28423): avc: denied { ioctl } for pid=19566 comm="syz.5.5597" path="/189/file0" dev="tmpfs" ino=1045 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 351.436354][ T29] audit: type=1400 audit(1756235382.951:28424): avc: denied { create } for pid=19572 comm="syz.2.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.457410][ T29] audit: type=1400 audit(1756235382.951:28425): avc: denied { write } for pid=19572 comm="syz.2.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.478505][ T29] audit: type=1400 audit(1756235382.951:28426): avc: denied { read } for pid=19572 comm="syz.2.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.514394][T19592] 9pnet_fd: Insufficient options for proto=fd [ 351.522651][T19588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.539558][T19591] bond8: entered promiscuous mode [ 351.565946][T19591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.571405][ T29] audit: type=1400 audit(1756235382.988:28427): avc: denied { create } for pid=19587 comm="syz.2.5607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.593951][ T29] audit: type=1400 audit(1756235383.108:28428): avc: denied { create } for pid=19595 comm="syz.0.5608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.613827][ T29] audit: type=1400 audit(1756235383.108:28429): avc: denied { bind } for pid=19595 comm="syz.0.5608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.628210][T19591] bond7: (slave bond8): Enslaving as an active interface with a down link [ 351.633621][ T29] audit: type=1400 audit(1756235383.108:28430): avc: denied { write } for pid=19595 comm="syz.0.5608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.666153][T19588] macvlan2: entered promiscuous mode [ 351.671508][T19588] macvlan2: entered allmulticast mode [ 351.678259][T19588] bond7: entered promiscuous mode [ 351.683821][ T29] audit: type=1400 audit(1756235383.209:28431): avc: denied { write } for pid=19587 comm="syz.2.5607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.684028][T19588] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 351.713416][T19588] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.730127][T19588] bond7: left promiscuous mode [ 351.737440][ T29] audit: type=1400 audit(1756235383.265:28432): avc: denied { module_request } for pid=19599 comm="syz.0.5609" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 351.786783][T19600] syzkaller0: entered allmulticast mode [ 351.798213][T19600] loop0: detected capacity change from 0 to 1024 [ 351.805385][T19600] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 351.816615][T19599] syzkaller0: left allmulticast mode [ 352.114787][T19621] can0: slcan on ttyS3. [ 352.175074][T19621] can0 (unregistered): slcan off ttyS3. [ 352.183703][T19630] can0: slcan on ttyS3. [ 352.191069][T19621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5616'. [ 352.272321][T19620] can0 (unregistered): slcan off ttyS3. [ 352.456914][T19642] 9pnet_fd: Insufficient options for proto=fd [ 352.528792][T19645] validate_nla: 2 callbacks suppressed [ 352.528819][T19645] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 352.662622][T19645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.737182][T19645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.745424][T19645] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 352.761472][T19645] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 352.790165][T19650] macvlan2: entered promiscuous mode [ 352.795732][T19650] macvlan2: entered allmulticast mode [ 352.802366][T19650] bond6: entered promiscuous mode [ 352.825479][T19650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.834091][T19650] bond6: left promiscuous mode [ 352.942436][T19663] netlink: 'syz.4.5631': attribute type 27 has an invalid length. [ 352.956445][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5631'. [ 353.034570][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5632'. [ 353.071748][T19670] 9pnet_fd: Insufficient options for proto=fd [ 353.143417][T19676] 9pnet_fd: Insufficient options for proto=fd [ 353.168774][T19674] loop0: detected capacity change from 0 to 512 [ 353.196408][T19674] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 353.213465][T19674] EXT4-fs (loop0): mount failed [ 353.340414][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5643'. [ 353.369107][T19697] loop5: detected capacity change from 0 to 512 [ 353.382702][T19700] 9pnet_fd: Insufficient options for proto=fd [ 353.402686][T19697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.421575][T19704] loop0: detected capacity change from 0 to 512 [ 353.428976][T19697] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.441664][T19697] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 353.445247][T19706] 9pnet_fd: Insufficient options for proto=fd [ 353.454175][T19697] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 353.473961][T19704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.488380][T19704] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.490745][T19710] 9pnet_fd: Insufficient options for proto=fd [ 353.499370][T19697] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 353.521642][T19704] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 353.535011][T19704] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 353.547418][T19697] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 353.560171][T19704] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 353.574922][T19704] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 353.601814][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.644868][T19185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.694616][T19724] loop5: detected capacity change from 0 to 512 [ 353.701616][T19724] journal_path: Non-blockdev passed as './bus' [ 353.707957][T19724] EXT4-fs: error: could not find journal device path [ 353.789881][T19733] 9pnet_fd: Insufficient options for proto=fd [ 353.798747][T19735] 9pnet_fd: Insufficient options for proto=fd [ 354.030317][T19752] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5667'. [ 354.066765][T19754] netlink: 'syz.1.5668': attribute type 27 has an invalid length. [ 354.123849][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 354.154366][ T2956] lo speed is unknown, defaulting to 1000 [ 354.160281][ T2956] syz0: Port: 1 Link DOWN [ 354.174707][T19763] FAULT_INJECTION: forcing a failure. [ 354.174707][T19763] name failslab, interval 1, probability 0, space 0, times 0 [ 354.187797][T19763] CPU: 1 UID: 0 PID: 19763 Comm: syz.4.5672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.187836][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.187855][T19763] Call Trace: [ 354.187864][T19763] [ 354.187875][T19763] __dump_stack+0x1d/0x30 [ 354.187936][T19763] dump_stack_lvl+0xe8/0x140 [ 354.187964][T19763] dump_stack+0x15/0x1b [ 354.188002][T19763] should_fail_ex+0x265/0x280 [ 354.188031][T19763] should_failslab+0x8c/0xb0 [ 354.188093][T19763] kmem_cache_alloc_node_noprof+0x57/0x320 [ 354.188143][T19763] ? perf_event_alloc+0x14c/0x1740 [ 354.188184][T19763] perf_event_alloc+0x14c/0x1740 [ 354.188228][T19763] __se_sys_perf_event_open+0x615/0x11c0 [ 354.188333][T19763] ? __rcu_read_unlock+0x4f/0x70 [ 354.188370][T19763] __x64_sys_perf_event_open+0x67/0x80 [ 354.188468][T19763] x64_sys_call+0x7bd/0x2ff0 [ 354.188498][T19763] do_syscall_64+0xd2/0x200 [ 354.188602][T19763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.188651][T19763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 354.188686][T19763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.188717][T19763] RIP: 0033:0x7f51c91aebe9 [ 354.188737][T19763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.188778][T19763] RSP: 002b:00007f51c7c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 354.188803][T19763] RAX: ffffffffffffffda RBX: 00007f51c93d5fa0 RCX: 00007f51c91aebe9 [ 354.188820][T19763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 354.188837][T19763] RBP: 00007f51c7c17090 R08: 0000000000000003 R09: 0000000000000000 [ 354.188853][T19763] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 354.188870][T19763] R13: 00007f51c93d6038 R14: 00007f51c93d5fa0 R15: 00007ffd339d9e38 [ 354.188895][T19763] [ 354.404397][T19764] bond9: entered promiscuous mode [ 354.439922][T19764] bond9 (unregistering): Released all slaves [ 354.499699][T19770] 9pnet_fd: Insufficient options for proto=fd [ 354.565558][T19776] netlink: 'syz.4.5677': attribute type 1 has an invalid length. [ 354.593006][T19776] 8021q: adding VLAN 0 to HW filter on device bond17 [ 354.614143][T19777] can0: slcan on ttyS3. [ 354.659092][T19776] bond18: entered promiscuous mode [ 354.666175][T19776] 8021q: adding VLAN 0 to HW filter on device bond18 [ 354.677413][T19776] bond17: (slave bond18): Enslaving as an active interface with a down link [ 354.703484][T19786] 9pnet_fd: Insufficient options for proto=fd [ 354.723142][T19776] macvlan2: entered promiscuous mode [ 354.728507][T19776] macvlan2: entered allmulticast mode [ 354.735951][T19772] can0 (unregistered): slcan off ttyS3. [ 354.745456][T19772] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 354.753226][T19772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5675'. [ 354.769766][T19776] bond17: entered promiscuous mode [ 354.780479][T19776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.789119][T19776] bond17: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 354.807969][T19776] bond17: left promiscuous mode [ 354.835149][T19777] can0: slcan on ttyS3. [ 354.865751][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5680'. [ 354.905422][T19771] can0 (unregistered): slcan off ttyS3. [ 354.965217][T19802] loop5: detected capacity change from 0 to 1024 [ 354.972605][T19802] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 354.983752][T19802] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 355.000431][T19802] JBD2: no valid journal superblock found [ 355.006335][T19802] EXT4-fs (loop5): Could not load journal inode [ 355.023790][T19802] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 355.462353][T19830] netlink: 'syz.2.5697': attribute type 27 has an invalid length. [ 355.474051][T19828] can0: slcan on ttyS3. [ 355.498460][T19830] bond8: left promiscuous mode [ 355.520751][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5697'. [ 355.544460][T19828] can0 (unregistered): slcan off ttyS3. [ 355.553650][T19831] can0: slcan on ttyS3. [ 355.561354][T19828] netlink: 'syz.4.5696': attribute type 1 has an invalid length. [ 355.569244][T19828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5696'. [ 355.604178][T19835] SELinux: security_context_str_to_sid (Önetlink_socketsocketˆ) failed with errno=-22 [ 355.630938][T19827] can0 (unregistered): slcan off ttyS3. [ 355.645175][T19837] 9pnet_fd: Insufficient options for proto=fd [ 355.671385][T19840] netlink: 'syz.2.5699': attribute type 10 has an invalid length. [ 355.679394][T19840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5699'. [ 355.693535][T19840] team0: Port device geneve1 added [ 355.699191][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.710547][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.730403][T19835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.794771][T19835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.807596][T19847] netlink: 'syz.4.5703': attribute type 13 has an invalid length. [ 355.828844][T19847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.837471][T19847] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.846790][T19847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.907790][T19849] netlink: 'syz.4.5704': attribute type 10 has an invalid length. [ 355.977163][T19857] 9pnet_fd: Insufficient options for proto=fd [ 356.041115][T19859] loop0: detected capacity change from 0 to 512 [ 356.060653][T19859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.073825][T19859] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.087601][T19859] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 356.099402][T19859] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 356.125877][T19863] can0: slcan on ttyS3. [ 356.151739][T19859] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 356.188008][T19869] lo speed is unknown, defaulting to 1000 [ 356.291622][T19859] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 356.335623][T19863] can0 (unregistered): slcan off ttyS3. [ 356.392629][T19870] can0: slcan on ttyS3. [ 356.463146][T19185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.498218][T19862] can0 (unregistered): slcan off ttyS3. [ 356.560753][T19882] FAULT_INJECTION: forcing a failure. [ 356.560753][T19882] name failslab, interval 1, probability 0, space 0, times 0 [ 356.573627][T19882] CPU: 1 UID: 0 PID: 19882 Comm: syz.4.5716 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.573686][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.573703][T19882] Call Trace: [ 356.573711][T19882] [ 356.573721][T19882] __dump_stack+0x1d/0x30 [ 356.573748][T19882] dump_stack_lvl+0xe8/0x140 [ 356.573842][T19882] dump_stack+0x15/0x1b [ 356.573929][T19882] should_fail_ex+0x265/0x280 [ 356.573951][T19882] should_failslab+0x8c/0xb0 [ 356.573982][T19882] kmem_cache_alloc_noprof+0x50/0x310 [ 356.574096][T19882] ? security_file_alloc+0x32/0x100 [ 356.574141][T19882] security_file_alloc+0x32/0x100 [ 356.574259][T19882] init_file+0x5c/0x1d0 [ 356.574291][T19882] alloc_empty_file+0x8b/0x200 [ 356.574330][T19882] path_openat+0x68/0x2170 [ 356.574350][T19882] ? native_apic_msr_write+0x3d/0x60 [ 356.574412][T19882] ? _parse_integer_limit+0x170/0x190 [ 356.574442][T19882] ? _parse_integer+0x27/0x40 [ 356.574475][T19882] ? kstrtoull+0x111/0x140 [ 356.574495][T19882] ? kstrtouint+0x76/0xc0 [ 356.574515][T19882] do_filp_open+0x109/0x230 [ 356.574552][T19882] do_sys_openat2+0xa6/0x110 [ 356.574587][T19882] __x64_sys_open+0xe6/0x110 [ 356.574634][T19882] x64_sys_call+0x1457/0x2ff0 [ 356.574656][T19882] do_syscall_64+0xd2/0x200 [ 356.574683][T19882] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.574799][T19882] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 356.574825][T19882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.574845][T19882] RIP: 0033:0x7f51c91aebe9 [ 356.574860][T19882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.574898][T19882] RSP: 002b:00007f51c7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 356.574918][T19882] RAX: ffffffffffffffda RBX: 00007f51c93d5fa0 RCX: 00007f51c91aebe9 [ 356.574930][T19882] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00002000000000c0 [ 356.574943][T19882] RBP: 00007f51c7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 356.574958][T19882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.574990][T19882] R13: 00007f51c93d6038 R14: 00007f51c93d5fa0 R15: 00007ffd339d9e38 [ 356.575014][T19882] [ 356.827923][T19892] FAULT_INJECTION: forcing a failure. [ 356.827923][T19892] name failslab, interval 1, probability 0, space 0, times 0 [ 356.840932][T19892] CPU: 1 UID: 0 PID: 19892 Comm: syz.4.5719 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.840962][T19892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.840976][T19892] Call Trace: [ 356.840982][T19892] [ 356.840991][T19892] __dump_stack+0x1d/0x30 [ 356.841093][T19892] dump_stack_lvl+0xe8/0x140 [ 356.841114][T19892] dump_stack+0x15/0x1b [ 356.841132][T19892] should_fail_ex+0x265/0x280 [ 356.841159][T19892] should_failslab+0x8c/0xb0 [ 356.841189][T19892] kmem_cache_alloc_node_noprof+0x57/0x320 [ 356.841326][T19892] ? perf_event_alloc+0x14c/0x1740 [ 356.841359][T19892] perf_event_alloc+0x14c/0x1740 [ 356.841396][T19892] __se_sys_perf_event_open+0x615/0x11c0 [ 356.841543][T19892] ? __rcu_read_unlock+0x4f/0x70 [ 356.841579][T19892] __x64_sys_perf_event_open+0x67/0x80 [ 356.841618][T19892] x64_sys_call+0x7bd/0x2ff0 [ 356.841646][T19892] do_syscall_64+0xd2/0x200 [ 356.841722][T19892] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.841758][T19892] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 356.841787][T19892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.841810][T19892] RIP: 0033:0x7f51c91aebe9 [ 356.841828][T19892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.841848][T19892] RSP: 002b:00007f51c7c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 356.841894][T19892] RAX: ffffffffffffffda RBX: 00007f51c93d5fa0 RCX: 00007f51c91aebe9 [ 356.841908][T19892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 356.841921][T19892] RBP: 00007f51c7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 356.841935][T19892] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 356.841948][T19892] R13: 00007f51c93d6038 R14: 00007f51c93d5fa0 R15: 00007ffd339d9e38 [ 356.841976][T19892] [ 357.085957][T19898] loop1: detected capacity change from 0 to 512 [ 357.093075][T19898] journal_path: Non-blockdev passed as './bus' [ 357.099305][T19898] EXT4-fs: error: could not find journal device path [ 357.112686][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 357.112706][ T29] audit: type=1326 audit(1756235388.217:28745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.142150][ T29] audit: type=1326 audit(1756235388.217:28746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.165933][ T29] audit: type=1326 audit(1756235388.217:28747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.189166][ T29] audit: type=1326 audit(1756235388.217:28748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.212269][ T29] audit: type=1326 audit(1756235388.217:28749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.235445][ T29] audit: type=1326 audit(1756235388.217:28750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.258533][ T29] audit: type=1326 audit(1756235388.217:28751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.281644][ T29] audit: type=1326 audit(1756235388.217:28752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.306943][T19896] 9pnet_fd: Insufficient options for proto=fd [ 357.323669][ T29] audit: type=1326 audit(1756235388.291:28753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.346944][ T29] audit: type=1326 audit(1756235388.291:28754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 357.753025][ T4837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.774999][ T4837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.862249][ T4837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.901890][ T4837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.059432][T19929] 9pnet_fd: Insufficient options for proto=fd [ 358.363027][T19927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.387402][T19927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.643425][T19965] validate_nla: 2 callbacks suppressed [ 358.643442][T19965] netlink: 'syz.0.5744': attribute type 1 has an invalid length. [ 358.656792][T19965] __nla_validate_parse: 9 callbacks suppressed [ 358.656809][T19965] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5744'. [ 358.731066][T19968] tmpfs: Bad value for 'mpol' [ 358.853428][T19975] uprobe: syz.0.5748:19975 failed to unregister, leaking uprobe [ 358.872165][T19975] uprobe: syz.0.5748:19975 failed to unregister, leaking uprobe [ 358.887278][T19977] 9pnet_fd: Insufficient options for proto=fd [ 359.158394][T19998] lo speed is unknown, defaulting to 1000 [ 359.292788][T20002] 9pnet_fd: Insufficient options for proto=fd [ 359.562372][T20008] loop5: detected capacity change from 0 to 512 [ 359.595782][T20008] EXT4-fs: Ignoring removed nobh option [ 359.640171][T20008] /dev/loop5: Can't open blockdev [ 359.772613][T20027] 9pnet_fd: Insufficient options for proto=fd [ 360.094333][T20076] bond19: entered promiscuous mode [ 360.101323][T20076] bond19 (unregistering): Released all slaves [ 360.217382][T20097] 9pnet_fd: Insufficient options for proto=fd [ 360.242595][T20104] netlink: 'syz.2.5773': attribute type 1 has an invalid length. [ 360.262340][T20104] 8021q: adding VLAN 0 to HW filter on device bond9 [ 360.339135][T20104] bond10: entered promiscuous mode [ 360.424388][T20127] netlink: 'syz.5.5774': attribute type 13 has an invalid length. [ 360.439791][T20127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.533097][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5778'. [ 361.098116][T20221] netlink: 'syz.2.5791': attribute type 27 has an invalid length. [ 361.124580][T20221] bond10: left promiscuous mode [ 361.129679][ T56] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.140247][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 361.145622][ T56] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.183632][ T56] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.192348][ T56] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.503174][T20245] syzkaller0: entered allmulticast mode [ 361.513657][T20245] loop1: detected capacity change from 0 to 1024 [ 361.522730][T20245] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 361.533016][T20244] syzkaller0: left allmulticast mode [ 362.172704][T20269] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 362.211030][T20271] blktrace: Concurrent blktraces are not allowed on sg0 [ 362.239248][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5810'. [ 362.268480][T20275] netlink: 'syz.5.5811': attribute type 2 has an invalid length. [ 362.276382][T20275] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.5811'. [ 362.327893][T20281] netlink: 'syz.5.5812': attribute type 1 has an invalid length. [ 362.347170][T20281] bond9: entered promiscuous mode [ 362.431476][T20283] lo speed is unknown, defaulting to 1000 [ 362.713337][T20287] loop1: detected capacity change from 0 to 512 [ 362.799334][T20287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.839993][T20287] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.855180][T20287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 362.855468][T20287] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 362.855613][T20287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 362.855754][T20287] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 362.856274][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 362.856289][ T29] audit: type=1400 audit(1756235393.505:29155): avc: denied { mount } for pid=20286 comm="kfree" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 362.856369][ T29] audit: type=1400 audit(1756235393.505:29156): avc: denied { add_name } for pid=20286 comm="kfree" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.856399][ T29] audit: type=1400 audit(1756235393.505:29157): avc: denied { create } for pid=20286 comm="kfree" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 362.870735][ T29] audit: type=1400 audit(1756235393.533:29158): avc: denied { tracepoint } for pid=20295 comm="syz.5.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 362.870925][ T29] audit: type=1400 audit(1756235393.533:29159): avc: denied { setattr } for pid=20286 comm="kfree" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.891881][ T29] audit: type=1400 audit(1756235393.561:29160): avc: denied { unmount } for pid=12595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 362.893135][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.900722][ T29] audit: type=1400 audit(1756235393.561:29161): avc: denied { create } for pid=20295 comm="syz.5.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.900759][ T29] audit: type=1400 audit(1756235393.561:29162): avc: denied { create } for pid=20295 comm="syz.5.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 362.901211][ T29] audit: type=1400 audit(1756235393.570:29163): avc: denied { read write } for pid=20295 comm="syz.5.5817" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 362.901301][ T29] audit: type=1400 audit(1756235393.570:29164): avc: denied { open } for pid=20295 comm="syz.5.5817" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 362.974948][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 363.062892][T20304] netlink: 'syz.4.5819': attribute type 27 has an invalid length. [ 363.173158][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5819'. [ 363.305571][T20304] bond18: left promiscuous mode [ 363.330372][T20310] smc: net device bond0 applied user defined pnetid SYZ0 [ 363.337777][T20310] smc: net device bond0 erased user defined pnetid SYZ0 [ 363.539709][T20312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.549544][T20312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.775722][T20340] 9pnet_fd: Insufficient options for proto=fd [ 363.848303][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5836'. [ 363.860875][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 363.893164][T20351] netlink: 'syz.2.5837': attribute type 27 has an invalid length. [ 363.959905][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 364.304142][T20353] lo speed is unknown, defaulting to 1000 [ 364.334415][T20357] can0: slcan on ttyS3. [ 364.342375][T20364] 9pnet_fd: Insufficient options for proto=fd [ 364.406895][T20358] can0 (unregistered): slcan off ttyS3. [ 364.421188][T20359] can0: slcan on ttyS3. [ 364.515141][T20352] can0 (unregistered): slcan off ttyS3. [ 364.538386][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5847'. [ 364.563219][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'. [ 364.652001][T20376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.669128][T20376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.726621][T20415] netlink: 'syz.1.5851': attribute type 27 has an invalid length. [ 364.759105][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5851'. [ 364.989927][T20436] lo speed is unknown, defaulting to 1000 [ 365.410102][T20450] can0: slcan on ttyS3. [ 365.457760][T20450] can0 (unregistered): slcan off ttyS3. [ 365.468257][T20450] can0: slcan on ttyS3. [ 365.484066][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5859'. [ 365.502845][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5859'. [ 365.512029][T20449] can0 (unregistered): slcan off ttyS3. [ 365.904715][T20518] loop1: detected capacity change from 0 to 512 [ 365.962413][T20518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.980879][T20534] netlink: 'syz.0.5867': attribute type 1 has an invalid length. [ 365.990437][T20518] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.006497][T20534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.008710][T20518] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 366.027651][T20518] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 366.039996][T20534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.047785][T20534] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 366.049808][T20518] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 366.060505][T20534] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 366.083183][T20518] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 366.091602][T20538] bond3: entered promiscuous mode [ 366.106040][T20538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.113911][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.115005][T20538] bond2: (slave bond3): Enslaving as an active interface with a down link [ 366.145179][T20534] macvlan2: entered promiscuous mode [ 366.150557][T20534] macvlan2: entered allmulticast mode [ 366.172060][T20534] bond2: entered promiscuous mode [ 366.172334][T20534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.197194][T20534] bond2: left promiscuous mode [ 366.338401][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 366.361477][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5871'. [ 366.376532][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.396493][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.485609][T20584] can0: slcan on ttyS3. [ 366.544515][T20584] can0 (unregistered): slcan off ttyS3. [ 366.553626][T20583] can0: slcan on ttyS3. [ 366.606181][T20582] can0 (unregistered): slcan off ttyS3. [ 366.654692][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5875'. [ 366.724101][T20592] team0 (unregistering): Port device team_slave_0 removed [ 366.738575][T20592] team0 (unregistering): Port device team_slave_1 removed [ 366.760138][T20586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.768721][T20586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.822179][T20591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.831139][T20591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.034763][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5883'. [ 367.046132][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 367.173040][T20623] netlink: 'syz.1.5887': attribute type 13 has an invalid length. [ 367.208170][T20623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.219052][T20623] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.226574][T20623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.242285][ T2956] lo speed is unknown, defaulting to 1000 [ 367.248502][ T2956] syz0: Port: 1 Link ACTIVE [ 367.290360][T20633] 9pnet_fd: Insufficient options for proto=fd [ 367.527230][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.584807][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.662777][T20665] netlink: 'syz.5.5902': attribute type 13 has an invalid length. [ 367.677289][T20665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.697123][T20666] 9pnet_fd: Insufficient options for proto=fd [ 367.783889][T20675] 9pnet: Could not find request transport: fd0x0000000000000004 [ 368.196430][T20706] lo speed is unknown, defaulting to 1000 [ 368.256414][T20705] netlink: 'syz.4.5921': attribute type 13 has an invalid length. [ 368.381751][T20705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.443274][T20705] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.510162][T20705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.563792][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 368.563812][ T29] audit: type=1400 audit(1756235398.773:29561): avc: denied { name_bind } for pid=20708 comm="syz.1.5922" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 368.591559][ T29] audit: type=1400 audit(1756235398.773:29562): avc: denied { node_bind } for pid=20708 comm="syz.1.5922" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 368.714551][T20710] can0: slcan on ttyS3. [ 368.819918][T20709] can0 (unregistered): slcan off ttyS3. [ 368.862067][T20710] can0: slcan on ttyS3. [ 368.913350][T20716] netlink: 'syz.5.5925': attribute type 1 has an invalid length. [ 368.937742][T20716] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.957182][T20708] can0 (unregistered): slcan off ttyS3. [ 368.996467][T20725] loop1: detected capacity change from 0 to 128 [ 369.003614][ T29] audit: type=1400 audit(1756235399.198:29563): avc: denied { mounton } for pid=20724 comm="syz.1.5929" path="/535/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 369.049879][ T3415] IPVS: starting estimator thread 0... [ 369.058027][ T29] audit: type=1400 audit(1756235399.244:29564): avc: denied { mount } for pid=20724 comm="syz.1.5929" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 369.080383][ T29] audit: type=1400 audit(1756235399.253:29565): avc: denied { read } for pid=20724 comm="syz.1.5929" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 369.104042][ T29] audit: type=1400 audit(1756235399.253:29566): avc: denied { open } for pid=20724 comm="syz.1.5929" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 369.128266][ T29] audit: type=1400 audit(1756235399.253:29567): avc: denied { ioctl } for pid=20724 comm="syz.1.5929" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 369.153691][ T29] audit: type=1326 audit(1756235399.253:29568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20724 comm="syz.1.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 369.153924][T20727] IPVS: using max 2208 ests per chain, 110400 per kthread [ 369.177577][ T29] audit: type=1326 audit(1756235399.253:29569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20724 comm="syz.1.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 369.208155][ T29] audit: type=1326 audit(1756235399.253:29570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20724 comm="syz.1.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3bc2debe9 code=0x7ffc0000 [ 369.279371][T20716] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.287131][T20716] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 369.302556][T20716] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 369.328241][T20726] bond11: entered promiscuous mode [ 369.334051][T20726] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.342758][T20726] bond10: (slave bond11): Enslaving as an active interface with a down link [ 369.354691][T20730] macvlan2: entered promiscuous mode [ 369.360145][T20730] macvlan2: entered allmulticast mode [ 369.370370][T20730] bond10: entered promiscuous mode [ 369.382344][T20730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 369.409640][T20730] bond10: left promiscuous mode [ 369.539061][T20757] loop5: detected capacity change from 0 to 512 [ 369.627317][T20758] lo speed is unknown, defaulting to 1000 [ 369.827709][T20757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.856654][T20757] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.899795][T20757] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 369.918973][T20757] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 369.935660][T20757] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 369.950277][T20757] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 369.975834][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.054246][ T37] bridge_slave_1: left allmulticast mode [ 370.059956][ T37] bridge_slave_1: left promiscuous mode [ 370.065891][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.073500][ T37] bridge_slave_0: left allmulticast mode [ 370.079171][ T37] bridge_slave_0: left promiscuous mode [ 370.084920][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.226229][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.235559][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.244944][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 370.253968][ T37] bond0 (unregistering): Released all slaves [ 370.262762][ T37] bond1 (unregistering): (slave bond2): Releasing active interface [ 370.271585][ T37] bond1 (unregistering): Released all slaves [ 370.280299][ T37] bond2 (unregistering): Released all slaves [ 370.289095][ T37] bond3 (unregistering): (slave bond4): Releasing active interface [ 370.297551][ T37] bond3 (unregistering): Released all slaves [ 370.307765][ T37] bond4 (unregistering): Released all slaves [ 370.316898][ T37] bond5 (unregistering): Released all slaves [ 370.327069][ T37] bond6 (unregistering): Released all slaves [ 370.381088][ T37] hsr_slave_0: left promiscuous mode [ 370.386973][ T37] hsr_slave_1: left promiscuous mode [ 370.392789][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.400344][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.425097][ T37] team0 (unregistering): Port device team_slave_1 removed [ 370.434670][ T37] team0 (unregistering): Port device team_slave_0 removed [ 370.465522][T18300] lo speed is unknown, defaulting to 1000 [ 370.471331][T18300] infiniband syz0: ib_query_port failed (-19) [ 457.699268][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 457.699283][ T29] audit: type=1400 audit(1756235481.052:29686): avc: denied { create } for pid=20768 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 457.707656][T20771] loop5: detected capacity change from 0 to 512 [ 457.725427][ T29] audit: type=1400 audit(1756235481.052:29687): avc: denied { create } for pid=20768 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.732900][T20773] __nla_validate_parse: 8 callbacks suppressed [ 457.732920][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5945'. [ 457.768179][ T29] audit: type=1400 audit(1756235481.089:29688): avc: denied { write } for pid=20768 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.789073][ T29] audit: type=1400 audit(1756235481.089:29689): avc: denied { read } for pid=20768 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.809805][ T29] audit: type=1400 audit(1756235481.089:29690): avc: denied { ioctl } for pid=20768 comm="syz.2.5945" path="socket:[73254]" dev="sockfs" ino=73254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.835800][ T29] audit: type=1400 audit(1756235481.089:29691): avc: denied { ioctl } for pid=20768 comm="syz.2.5945" path="socket:[73251]" dev="sockfs" ino=73251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 457.861031][ T29] audit: type=1400 audit(1756235481.089:29692): avc: denied { create } for pid=20768 comm="syz.2.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 457.880991][ T29] audit: type=1400 audit(1756235481.089:29693): avc: denied { ioctl } for pid=20768 comm="syz.2.5945" path="socket:[73255]" dev="sockfs" ino=73255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 457.909121][ T29] audit: type=1400 audit(1756235481.190:29694): avc: denied { read } for pid=20774 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.930861][ T29] audit: type=1400 audit(1756235481.190:29695): avc: denied { open } for pid=20774 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.956000][T20771] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.5946: corrupted in-inode xattr: invalid ea_ino [ 457.970394][T20771] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5946: couldn't read orphan inode 15 (err -117) [ 457.992103][T20771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.039092][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.073907][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5948'. [ 458.130122][T20786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.142988][T20793] Driver unsupported XDP return value 0 on prog (id 4492) dev N/A, expect packet loss! [ 458.152867][T20774] chnl_net:caif_netlink_parms(): no params data found [ 458.162213][T20798] vlan2: entered allmulticast mode [ 458.167467][T20798] bond4: entered allmulticast mode [ 458.193472][T20802] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5954'. [ 458.241040][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5953'. [ 458.314325][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.321582][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.344173][T20774] bridge_slave_0: entered allmulticast mode [ 458.361769][T20774] bridge_slave_0: entered promiscuous mode [ 458.388842][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.395993][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.426845][T20774] bridge_slave_1: entered allmulticast mode [ 458.433615][T20774] bridge_slave_1: entered promiscuous mode [ 458.460037][T20817] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5957'. [ 458.496632][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.519288][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.548472][T20774] team0: Port device team_slave_0 added [ 458.560233][T20774] team0: Port device team_slave_1 added [ 458.671592][T20823] loop5: detected capacity change from 0 to 512 [ 458.679073][T20823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.699034][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.706117][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.732130][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.746129][T20823] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 458.773046][T20823] EXT4-fs (loop5): 1 truncate cleaned up [ 458.779666][T20823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.794757][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.801843][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.828021][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.934316][T20774] hsr_slave_0: entered promiscuous mode [ 458.942310][T20774] hsr_slave_1: entered promiscuous mode [ 458.953482][T20774] debugfs: 'hsr0' already exists in 'hsr' [ 458.959275][T20774] Cannot create hsr debugfs directory [ 458.978257][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.999247][T20827] loop5: detected capacity change from 0 to 512 [ 459.073393][T20774] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.082439][T20774] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.489566][T20774] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.550959][T20774] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.607693][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.622686][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.633317][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.640550][T11538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.661063][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.663787][T20837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5964'. [ 459.668242][T11538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.692550][T20837] bridge_slave_1: left allmulticast mode [ 459.698347][T20837] bridge_slave_1: left promiscuous mode [ 459.704012][T20837] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.712484][T20837] bridge_slave_0: left allmulticast mode [ 459.718315][T20837] bridge_slave_0: left promiscuous mode [ 459.724044][T20837] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.752009][T20774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.762549][T20774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.783889][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'. [ 459.824026][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.919521][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5966'. [ 459.951174][T20859] 8021q: adding VLAN 0 to HW filter on device bond19 [ 459.970796][T20859] vlan2: entered allmulticast mode [ 459.976188][T20859] bond19: entered allmulticast mode [ 459.991569][T20867] netlink: 'syz.5.5967': attribute type 1 has an invalid length. [ 460.013856][T20867] 8021q: adding VLAN 0 to HW filter on device bond12 [ 460.035333][T20867] 8021q: adding VLAN 0 to HW filter on device bond12 [ 460.044790][T20867] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 460.045598][T20870] block device autoloading is deprecated and will be removed. [ 460.056987][T20867] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 460.070840][T20870] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 460.098832][T20873] bond13: entered promiscuous mode [ 460.104994][T20873] 8021q: adding VLAN 0 to HW filter on device bond13 [ 460.114075][T20873] bond12: (slave bond13): Enslaving as an active interface with a down link [ 460.134255][T20774] veth0_vlan: entered promiscuous mode [ 460.146367][T20774] veth1_vlan: entered promiscuous mode [ 460.179296][T20774] veth0_macvtap: entered promiscuous mode [ 460.202652][T20774] veth1_macvtap: entered promiscuous mode [ 460.227181][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.242212][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.254080][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.269539][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.278526][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.291477][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.309744][T20888] netlink: 'syz.0.5971': attribute type 13 has an invalid length. [ 460.352890][T20888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.417832][T20894] loop5: detected capacity change from 0 to 2048 [ 460.444970][T20894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.479786][T20894] can0: slcan on ptm0. [ 460.587766][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5976'. [ 460.601222][T20917] vlan2: entered allmulticast mode [ 460.606550][T20917] gretap0: entered allmulticast mode [ 460.617754][T20919] tipc: Started in network mode [ 460.623252][T20919] tipc: Node identity ac14140f, cluster identity 4711 [ 460.630697][T20919] tipc: New replicast peer: 255.255.255.255 [ 460.637170][T20919] tipc: Enabled bearer , priority 10 [ 460.842350][T20893] can0 (unregistered): slcan off ptm0. [ 460.866370][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.001049][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5979'. [ 461.019562][T20970] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.044732][T20970] vlan2: entered allmulticast mode [ 461.050066][T20970] bond11: entered allmulticast mode [ 461.536506][T21044] tipc: Started in network mode [ 461.541442][T21044] tipc: Node identity ac14140f, cluster identity 4711 [ 461.549142][T21044] tipc: New replicast peer: 255.255.255.255 [ 461.555235][T21044] tipc: Enabled bearer , priority 10 [ 461.833650][T21060] netlink: 'syz.5.5988': attribute type 1 has an invalid length. [ 461.842585][T21058] syz.6.5986 (21058) used greatest stack depth: 8880 bytes left [ 461.849114][T21060] 8021q: adding VLAN 0 to HW filter on device bond14 [ 461.850353][T18301] tipc: Node number set to 2886997007 [ 461.869723][T21060] 8021q: adding VLAN 0 to HW filter on device bond14 [ 461.877180][T21060] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 461.889423][T21060] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 461.930054][T21064] bond15: entered promiscuous mode [ 461.936271][T21064] 8021q: adding VLAN 0 to HW filter on device bond15 [ 461.944964][T21064] bond14: (slave bond15): Enslaving as an active interface with a down link [ 461.959600][T21060] macvlan2: entered promiscuous mode [ 461.964968][T21060] macvlan2: entered allmulticast mode [ 461.971283][T21060] bond14: entered promiscuous mode [ 461.976630][T21060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.985285][T21060] bond14: left promiscuous mode [ 462.108570][T21077] loop5: detected capacity change from 0 to 512 [ 462.125944][T21075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.138673][T21075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.152046][T21077] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.5995: corrupted in-inode xattr: invalid ea_ino [ 462.185290][T21077] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5995: couldn't read orphan inode 15 (err -117) [ 462.259206][T21077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.322200][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.419007][T21115] loop5: detected capacity change from 0 to 512 [ 462.439481][T21115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.466235][ T4112] IPVS: starting estimator thread 0... [ 462.493913][T21115] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.536492][T21115] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 462.582157][T21115] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 462.597285][T21124] IPVS: using max 2016 ests per chain, 100800 per kthread [ 462.597990][T21137] 9pnet_fd: Insufficient options for proto=fd [ 462.622148][T21115] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 462.640626][ T9] tipc: Node number set to 2886997007 [ 462.644968][T21140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.665008][T21115] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 462.687705][T21140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.726971][T21153] netlink: 'syz.0.6013': attribute type 4 has an invalid length. [ 462.742620][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.656127][T21237] 9pnet_fd: Insufficient options for proto=fd [ 463.680795][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 463.680819][ T29] audit: type=1400 audit(1756235486.558:29961): avc: denied { mounton } for pid=21232 comm="syz.5.6032" path="/syzcgroup/net/syz5/devices.allow" dev="cgroup" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 463.771110][T21241] __nla_validate_parse: 7 callbacks suppressed [ 463.771131][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6033'. [ 463.788270][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 463.941706][ T29] audit: type=1326 audit(1756235486.828:29962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 463.966415][ T29] audit: type=1326 audit(1756235486.828:29963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 463.989658][ T29] audit: type=1326 audit(1756235486.828:29964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.012939][ T29] audit: type=1326 audit(1756235486.828:29965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.036267][ T29] audit: type=1326 audit(1756235486.828:29966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.059466][ T29] audit: type=1326 audit(1756235486.828:29967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.082665][ T29] audit: type=1326 audit(1756235486.828:29968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.106033][ T29] audit: type=1326 audit(1756235486.828:29969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.129149][ T29] audit: type=1326 audit(1756235486.828:29970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f51c91aebe9 code=0x7ffc0000 [ 464.363671][T21313] netlink: 'syz.0.6045': attribute type 4 has an invalid length. [ 464.398795][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6045'. [ 464.457970][T21322] loop5: detected capacity change from 0 to 128 [ 464.465133][T21322] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 464.479843][T21322] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 464.481460][T21324] netlink: 'syz.0.6049': attribute type 4 has an invalid length. [ 464.511272][T16830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.517311][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'. [ 464.539048][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6050'. [ 464.594190][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6052'. [ 464.594369][T21337] block device autoloading is deprecated and will be removed. [ 464.607288][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6052'. [ 464.697813][T21348] netlink: 'syz.4.6059': attribute type 4 has an invalid length. [ 464.708750][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'. [ 464.722898][T21350] loop5: detected capacity change from 0 to 128 [ 464.742164][T21350] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 464.756647][T21350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 464.786395][T16830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.827494][T21362] netlink: 'syz.4.6065': attribute type 4 has an invalid length. [ 464.828481][T21363] loop5: detected capacity change from 0 to 128 [ 464.836104][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 464.858424][T21365] netlink: 'syz.6.6066': attribute type 1 has an invalid length. [ 464.935398][T21365] bond1: entered promiscuous mode [ 464.941933][T21365] bond1 (unregistering): Released all slaves [ 464.998649][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6072'. [ 465.001324][T21385] macvlan2: entered promiscuous mode [ 465.013082][T21385] macvlan2: entered allmulticast mode [ 465.035794][T21380] 8021q: adding VLAN 0 to HW filter on device bond20 [ 465.048743][T21384] netlink: 'syz.5.6074': attribute type 4 has an invalid length. [ 465.189237][T21398] tipc: Started in network mode [ 465.194256][T21398] tipc: Node identity ac14140f, cluster identity 4711 [ 465.202683][T21398] tipc: New replicast peer: 255.255.255.255 [ 465.208818][T21398] tipc: Enabled bearer , priority 10 [ 465.529293][T21429] 8021q: adding VLAN 0 to HW filter on device bond21 [ 465.580690][T21429] vlan2: entered allmulticast mode [ 465.585950][T21429] bond21: entered allmulticast mode [ 465.690339][T21438] bridge0: port 3(batadv1) entered blocking state [ 465.696980][T21438] bridge0: port 3(batadv1) entered disabled state [ 465.706171][T21438] batadv1: entered allmulticast mode [ 465.712809][T21438] batadv1: entered promiscuous mode [ 465.911223][T21464] validate_nla: 1 callbacks suppressed [ 465.911241][T21464] netlink: 'syz.0.6104': attribute type 4 has an invalid length. [ 465.926431][T21455] 9pnet_fd: Insufficient options for proto=fd [ 466.183030][T21483] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.195131][T21483] bond0: (slave lo): Error: Device type is different from other slaves [ 466.237850][ T3934] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 466.247125][ T3934] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 466.291780][ T9] tipc: Node number set to 2886997007 [ 466.402653][T21496] netlink: 'syz.0.6118': attribute type 27 has an invalid length. [ 466.430605][T21496] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.437855][T21496] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.471071][T21496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.499885][T21496] bond1: left promiscuous mode [ 466.505304][T21496] bond3: left promiscuous mode [ 466.511787][ T4837] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.520991][ T4837] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.529959][ T4837] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.540544][ T4837] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.573609][T21503] bridge0: port 3(batadv1) entered blocking state [ 466.580120][T21503] bridge0: port 3(batadv1) entered disabled state [ 466.587198][T21503] batadv1: entered allmulticast mode [ 466.593235][T21503] batadv1: entered promiscuous mode [ 466.633029][T21505] 8021q: adding VLAN 0 to HW filter on device bond12 [ 466.652605][T21505] vlan2: entered allmulticast mode [ 466.657777][T21505] bond12: entered allmulticast mode [ 466.806206][T21520] netlink: 'syz.2.6127': attribute type 4 has an invalid length. [ 466.892016][T21536] loop0: detected capacity change from 0 to 512 [ 466.912562][T21536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.925724][T21536] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.938001][T21536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 466.950296][T21536] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 466.963024][T21536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 466.976751][T21536] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 467.001631][T19185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.115313][T11538] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 467.124687][T11538] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 467.180914][T21552] 8021q: adding VLAN 0 to HW filter on device bond16 [ 467.208214][T21552] vlan2: entered allmulticast mode [ 467.213500][T21552] bond16: entered allmulticast mode [ 467.236722][T21558] netlink: 'syz.2.6141': attribute type 4 has an invalid length. [ 467.679832][ T4112] IPVS: starting estimator thread 0... [ 467.766559][T21582] loop5: detected capacity change from 0 to 128 [ 467.776772][T21582] syz.5.6150: attempt to access beyond end of device [ 467.776772][T21582] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 467.791277][T21577] IPVS: using max 2640 ests per chain, 132000 per kthread [ 467.799549][T21580] syz.5.6150: attempt to access beyond end of device [ 467.799549][T21580] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 467.813012][T21580] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 467.992800][T21591] 8021q: adding VLAN 0 to HW filter on device bond13 [ 468.005453][T21591] vlan2: entered allmulticast mode [ 468.010622][T21591] bond13: entered allmulticast mode [ 468.079147][T21594] loop5: detected capacity change from 0 to 512 [ 468.122848][T21594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.144635][T21594] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.158999][T21594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 468.172521][T21594] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm kfree: mark_inode_dirty error [ 468.176304][T21600] loop0: detected capacity change from 0 to 512 [ 468.186288][T21594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm kfree: corrupted inode contents [ 468.194065][T21600] journal_path: Non-blockdev passed as './bus' [ 468.207445][T21600] EXT4-fs: error: could not find journal device path [ 468.208151][T21594] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm kfree: mark_inode_dirty error [ 468.244572][T16830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.688821][T21620] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.701334][T21620] bond0: (slave lo): Error: Device type is different from other slaves [ 468.746607][T21625] loop5: detected capacity change from 0 to 128 [ 469.100752][T21664] netlink: 'syz.6.6183': attribute type 27 has an invalid length. [ 469.132940][T21664] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.140347][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.198818][T21671] netlink: 'syz.0.6185': attribute type 1 has an invalid length. [ 469.311313][T21664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.375676][T21687] __nla_validate_parse: 19 callbacks suppressed [ 469.375698][T21687] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6192'. [ 469.407419][T21671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.437465][T21678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.448327][T21678] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 469.469543][T21678] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 469.491677][T21685] bond6: entered promiscuous mode [ 469.497719][T21685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.506341][T21685] bond5: (slave bond6): Enslaving as an active interface with a down link [ 469.515085][T21392] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.532244][T21691] macvlan2: entered promiscuous mode [ 469.537605][T21691] macvlan2: entered allmulticast mode [ 469.553924][T21691] bond5: entered promiscuous mode [ 469.560997][T21691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.571524][T21691] bond5: left promiscuous mode [ 469.579128][T21392] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.590294][T21392] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.599536][T21392] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.770279][T21715] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6203'. [ 469.783196][T21717] netlink: 'syz.2.6204': attribute type 27 has an invalid length. [ 469.797800][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'. [ 469.817673][T21719] can0: slcan on ptm1. [ 469.887043][T13201] ================================================================== [ 469.895173][T13201] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 469.902393][T13201] [ 469.904789][T13201] read-write to 0xffff8881186a8c88 of 4 bytes by task 21046 on cpu 0: [ 469.913047][T13201] free_pid+0x77/0x180 [ 469.917128][T13201] free_pids+0x7a/0xb0 [ 469.921294][T13201] release_task+0x9a9/0xb60 [ 469.925826][T13201] do_exit+0xd81/0x15c0 [ 469.930003][T13201] do_group_exit+0xff/0x140 [ 469.934713][T13201] get_signal+0xe59/0xf70 [ 469.939090][T13201] arch_do_signal_or_restart+0x96/0x480 [ 469.944662][T13201] exit_to_user_mode_loop+0x7a/0x100 [ 469.950073][T13201] do_syscall_64+0x1d6/0x200 [ 469.954708][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.960614][T13201] [ 469.962977][T13201] read to 0xffff8881186a8c88 of 4 bytes by task 13201 on cpu 1: [ 469.970728][T13201] zap_pid_ns_processes+0x1ff/0x2d0 [ 469.975949][T13201] do_exit+0x1414/0x15c0 [ 469.980209][T13201] do_group_exit+0xff/0x140 [ 469.984757][T13201] get_signal+0xe59/0xf70 [ 469.989107][T13201] arch_do_signal_or_restart+0x96/0x480 [ 469.994663][T13201] exit_to_user_mode_loop+0x7a/0x100 [ 469.999975][T13201] do_syscall_64+0x1d6/0x200 [ 470.004590][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.010494][T13201] [ 470.012835][T13201] value changed: 0x00000002 -> 0x00000001 [ 470.018562][T13201] [ 470.020897][T13201] Reported by Kernel Concurrency Sanitizer on: [ 470.027056][T13201] CPU: 1 UID: 0 PID: 13201 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.037050][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.047114][T13201] ================================================================== [ 470.079182][ T29] kauditd_printk_skb: 3753 callbacks suppressed [ 470.079202][ T29] audit: type=1400 audit(1756235492.467:33724): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[336]" dev="pipefs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 470.428821][T21392] team0: Port device geneve1 removed [ 470.573044][T21392] bond0 (unregistering): (slave bond1): Releasing active interface [ 470.581415][T21392] bond0 (unregistering): Released all slaves [ 470.589859][T21392] bond1 (unregistering): Released all slaves [ 470.598822][T21392] bond2 (unregistering): (slave bond3): Releasing active interface [ 470.607229][T21392] bond2 (unregistering): Released all slaves [ 470.616035][T21392] bond3 (unregistering): Released all slaves [ 470.624492][T21392] bond4 (unregistering): Released all slaves [ 470.633168][T21392] bond5 (unregistering): Released all slaves [ 470.641895][T21392] bond6 (unregistering): Released all slaves [ 470.650690][T21392] bond7 (unregistering): (slave bond8): Releasing active interface [ 470.659136][T21392] bond7 (unregistering): Released all slaves [ 470.667448][T21392] bond8 (unregistering): Released all slaves [ 470.675478][T21392] bond9 (unregistering): Released all slaves [ 470.683535][T21392] bond10 (unregistering): Released all slaves [ 470.692055][T21392] bond11 (unregistering): Released all slaves [ 470.700577][T21392] bond12 (unregistering): Released all slaves [ 470.709348][T21392] bond13 (unregistering): Released all slaves [ 470.748490][T21392] tipc: Disabling bearer [ 470.753749][T21392] tipc: Left network mode [ 470.760584][T21392] hsr_slave_0: left promiscuous mode [ 470.766472][T21392] hsr_slave_1: left promiscuous mode [ 470.772106][T21392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.781650][T21392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.815926][T21392] team0 (unregistering): Port device team_slave_1 removed [ 470.825830][T21392] team0 (unregistering): Port device team_slave_0 removed [ 471.524949][T21719] can0 (unregistered): slcan off ptm1. [ 471.864418][T21392] batadv1: left allmulticast mode [ 471.869490][T21392] batadv1: left promiscuous mode [ 471.874524][T21392] bridge0: port 3(batadv1) entered disabled state [ 471.881511][T21392] bridge_slave_1: left allmulticast mode [ 471.887216][T21392] bridge_slave_1: left promiscuous mode [ 471.892917][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.900822][T21392] bridge_slave_0: left allmulticast mode [ 471.906512][T21392] bridge_slave_0: left promiscuous mode [ 471.912252][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.920602][T21392] batadv1: left allmulticast mode [ 471.925719][T21392] batadv1: left promiscuous mode [ 471.930862][T21392] bridge0: port 3(batadv1) entered disabled state [ 471.937865][T21392] bridge_slave_1: left allmulticast mode [ 471.943539][T21392] bridge_slave_1: left promiscuous mode [ 471.949315][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.957098][T21392] bridge_slave_0: left allmulticast mode [ 471.962807][T21392] bridge_slave_0: left promiscuous mode [ 471.968677][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.037962][T21392] bond0 (unregistering): Released all slaves [ 472.046627][T21392] bond1 (unregistering): (slave bond2): Releasing active interface [ 472.055081][T21392] bond1 (unregistering): Released all slaves [ 472.063708][T21392] bond2 (unregistering): Released all slaves [ 472.072457][T21392] bond3 (unregistering): (slave bond4): Releasing active interface [ 472.081119][T21392] bond3 (unregistering): Released all slaves [ 472.089898][T21392] bond4 (unregistering): Released all slaves [ 472.098147][T21392] bond5 (unregistering): (slave bond6): Releasing active interface [ 472.106893][T21392] bond5 (unregistering): Released all slaves [ 472.115010][T21392] bond6 (unregistering): Released all slaves [ 472.123819][T21392] bond7 (unregistering): (slave bond8): Releasing active interface [ 472.132594][T21392] bond7 (unregistering): Released all slaves [ 472.140755][T21392] bond8 (unregistering): Released all slaves [ 472.149505][T21392] bond9 (unregistering): (slave bond10): Releasing active interface [ 472.158062][T21392] bond9 (unregistering): Released all slaves [ 472.166325][T21392] bond10 (unregistering): Released all slaves [ 472.174817][T21392] bond11 (unregistering): (slave bond12): Releasing active interface [ 472.183315][T21392] bond11 (unregistering): Released all slaves [ 472.192053][T21392] bond12 (unregistering): Released all slaves [ 472.201109][T21392] bond13 (unregistering): (slave bond14): Releasing active interface [ 472.209686][T21392] bond13 (unregistering): Released all slaves [ 472.218787][T21392] bond14 (unregistering): Released all slaves [ 472.227640][T21392] bond15 (unregistering): Released all slaves [ 472.236440][T21392] bond16 (unregistering): Released all slaves [ 472.245107][T21392] bond17 (unregistering): (slave bond18): Releasing active interface [ 472.253795][T21392] bond17 (unregistering): Released all slaves [ 472.262226][T21392] bond18 (unregistering): Released all slaves [ 472.270478][T21392] bond19 (unregistering): Released all slaves [ 472.279460][T21392] bond20 (unregistering): Released all slaves [ 472.288024][T21392] bond21 (unregistering): Released all slaves [ 472.361484][T21392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.370920][T21392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.380201][T21392] bond0 (unregistering): Released all slaves [ 472.389026][T21392] bond1 (unregistering): (slave bond2): Releasing active interface [ 472.397396][T21392] bond1 (unregistering): Released all slaves [ 472.405875][T21392] bond2 (unregistering): Released all slaves [ 472.414533][T21392] bond3 (unregistering): (slave bond4): Releasing active interface [ 472.423118][T21392] bond3 (unregistering): Released all slaves [ 472.431605][T21392] bond4 (unregistering): Released all slaves [ 472.439945][T21392] bond5 (unregistering): Released all slaves [ 472.448531][T21392] bond6 (unregistering): Released all slaves [ 472.457492][T21392] bond7 (unregistering): (slave bond8): Releasing active interface [ 472.465906][T21392] bond7 (unregistering): Released all slaves [ 472.474435][T21392] bond8 (unregistering): Released all slaves [ 472.483054][T21392] bond9 (unregistering): Released all slaves [ 472.491656][T21392] bond10 (unregistering): (slave bond11): Releasing active interface [ 472.502650][T21392] bond10 (unregistering): Released all slaves [ 472.511284][T21392] bond11 (unregistering): Released all slaves [ 472.520050][T21392] bond12 (unregistering): (slave bond13): Releasing active interface [ 472.528724][T21392] bond12 (unregistering): Released all slaves [ 472.537215][T21392] bond13 (unregistering): Released all slaves [ 472.546361][T21392] bond14 (unregistering): (slave bond15): Releasing active interface [ 472.554889][T21392] bond14 (unregistering): Released all slaves [ 472.563464][T21392] bond15 (unregistering): Released all slaves [ 472.572189][T21392] bond16 (unregistering): Released all slaves [ 472.675054][T21392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.684478][T21392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.693652][T21392] bond0 (unregistering): Released all slaves [ 472.701969][T21392] bond1 (unregistering): Released all slaves [ 472.710321][T21392] bond2 (unregistering): (slave bond3): Releasing active interface [ 472.719073][T21392] bond2 (unregistering): Released all slaves [ 472.727405][T21392] bond3 (unregistering): Released all slaves [ 472.735625][T21392] bond4 (unregistering): Released all slaves [ 472.744141][T21392] bond5 (unregistering): (slave bond6): Releasing active interface [ 472.752567][T21392] bond5 (unregistering): Released all slaves [ 472.760894][T21392] bond6 (unregistering): Released all slaves [ 472.819317][T21392] tipc: Disabling bearer [ 472.824653][T21392] tipc: Left network mode [ 472.829601][T21392] tipc: Disabling bearer [ 472.834977][T21392] tipc: Left network mode [ 472.903202][T21392] hsr_slave_0: left promiscuous mode [ 472.909072][T21392] hsr_slave_1: left promiscuous mode [ 472.916422][T21392] hsr_slave_0: left promiscuous mode [ 472.922082][T21392] hsr_slave_1: left promiscuous mode [ 472.927842][T21392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.935600][T21392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.944348][T21392] hsr_slave_0: left promiscuous mode [ 472.950169][T21392] hsr_slave_1: left promiscuous mode [ 472.955922][T21392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.035366][T21392] team0 (unregistering): Port device team_slave_1 removed [ 473.045741][T21392] team0 (unregistering): Port device team_slave_0 removed [ 473.966732][T21392] IPVS: stop unused estimator thread 0... [ 473.973077][T21392] IPVS: stop unused estimator thread 0... [ 474.279530][T21392] bridge_slave_1: left allmulticast mode [ 474.285193][T21392] bridge_slave_1: left promiscuous mode [ 474.290884][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.298865][T21392] bridge_slave_0: left allmulticast mode [ 474.304521][T21392] bridge_slave_0: left promiscuous mode [ 474.310246][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.375825][T21392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.385417][T21392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.394776][T21392] bond0 (unregistering): Released all slaves [ 474.442261][T21392] hsr_slave_0: left promiscuous mode [ 474.447986][T21392] hsr_slave_1: left promiscuous mode [ 474.453663][T21392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.481757][T21392] team0 (unregistering): Port device team_slave_1 removed [ 474.491338][T21392] team0 (unregistering): Port device team_slave_0 removed [ 474.896294][T21392] IPVS: stop unused estimator thread 0...