last executing test programs: 5m9.567856579s ago: executing program 4 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r5], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 5m9.278013703s ago: executing program 4 (id=523): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 5m9.227642064s ago: executing program 4 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 5m9.134132495s ago: executing program 4 (id=527): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x21, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 5m9.133857815s ago: executing program 4 (id=528): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x1000, 0xfffffffd, 0x29d}) close_range(r3, 0xffffffffffffffff, 0x0) 5m8.938110498s ago: executing program 4 (id=531): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='writeback_bdi_register\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5m8.916243848s ago: executing program 32 (id=531): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='writeback_bdi_register\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5m8.408081135s ago: executing program 2 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 5m8.071045651s ago: executing program 2 (id=540): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) 5m7.729355215s ago: executing program 2 (id=548): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x600, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 5m7.38859939s ago: executing program 2 (id=553): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x21, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 5m7.174038533s ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 5m7.070632765s ago: executing program 2 (id=557): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000040), &(0x7f0000000200)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 5m6.981362396s ago: executing program 33 (id=557): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000040), &(0x7f0000000200)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 4.688106543s ago: executing program 0 (id=4056): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.185276809s ago: executing program 0 (id=4063): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x18) sendto$inet6(r2, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_open_pts(r6, 0x101) 3.849562795s ago: executing program 6 (id=4066): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) set_mempolicy(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x20000, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{0x0, 0xff8c}]}, 0x18, 0x0) 3.561881339s ago: executing program 0 (id=4067): fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$inet6(0xa, 0xa, 0x5) sendto$inet6(r0, &(0x7f0000000100)="ec176c232b498df277fdff1c3fa1d8824496fef459ed76bcda4026f9136130ef348eeb6a8e9f3c03673fc389f151aa8c26fb506719ee0084061ea6791c88e5b1a4f81bb7f4ffc33349a90ad14a789b3bf7320e09117b2625e80a89a7f7ef8de7b78a126ff7346026caf00acbfa575e81ba74d480ebd7d3f1abcf474f4bc6aa7aed3e5e4fdac4e93b1f89b64f1c53ec96836ebe35", 0x94, 0x44090, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000007f000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0efffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2232}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x80000001}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 3.49453764s ago: executing program 1 (id=4068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) syz_socket_connect_nvme_tcp() socket(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) 3.273398673s ago: executing program 0 (id=4069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0xa4, 0x1, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mlockall(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$binfmt_format(r3, &(0x7f0000000000)='1\x00', 0xb000) 3.090959096s ago: executing program 5 (id=4070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x80ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.675873431s ago: executing program 3 (id=4071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x100000df, @empty}, 0x1c) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0xc018}, 0x4008010) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x24020400) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r5, 0x0, 0xfffffffffffffffd) 2.650166732s ago: executing program 6 (id=4072): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xdc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0xffbe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x400, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') recvfrom$inet(r1, &(0x7f0000000040)=""/39, 0x27, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x41005, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') readlink(&(0x7f00000012c0)='./file0/../file0\x00', &(0x7f0000001580)=""/84, 0x54) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x4082, &(0x7f0000000380)=0x0) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 2.585974973s ago: executing program 5 (id=4073): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 2.490671784s ago: executing program 1 (id=4074): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@data_err_ignore}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@norecovery}, {@barrier}, {@lazytime}, {@sb}, {@min_batch_time}, {@data_journal}], [{@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@fowner_eq}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@audit}]}, 0x1, 0x56d, &(0x7f0000000ec0)="$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") unshare(0x2040400) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0x0, 0x0) r1 = gettid() r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r2, &(0x7f0000000040)=0x8, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x268b, &(0x7f0000000680)={0x0, 0x2aee, 0x800, 0x0, 0x3bd}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 2.449622075s ago: executing program 6 (id=4075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x404200, 0x0) readv(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x600}, 0x0) pipe2$9p(0x0, 0x84080) 1.593818217s ago: executing program 3 (id=4076): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x453, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x44044) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2508000, 0x0, 0x40, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000240)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) 1.593385337s ago: executing program 5 (id=4077): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x2000000000000000, 0x8}, 0x1000, 0x5dd8, 0x100000, 0x5, 0x0, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x3ff) shutdown(0xffffffffffffffff, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800000, 0x4000010, 0xffffffffffffffff, 0xb961f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @remote, 0x9}, 0x1c) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="8800028040000100240001006d6f6465000000000000000000000000000000000200000000000000000000000500030005000000100004"], 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.508420338s ago: executing program 1 (id=4078): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}], 0x18}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0x80009e, &(0x7f0000000640)={0x0, 0x1000ec25, 0x80, 0x0, 0x40000333}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x291f, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xd348}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) sync() sync() sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x840) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 1.117131894s ago: executing program 3 (id=4079): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) socket$netlink(0x10, 0x3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x70, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x278efada38d51281}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) unshare(0x6040600) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r8, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="aafc21b60e00000000000005021c2bc2040000000604010c000100084fb46ad8eafb86745cd9b069332e2fd459b614669cbc614e5231b24a5f963d799f5f44764770fbfb3aea93d3fb929746d006b586d9b7063b70c5bb7183887088e0f7ad6766b439ee911e2aa04982c4ea0100c20400000007050200020502ffff040103"], 0x80) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.115744084s ago: executing program 6 (id=4080): accept4$inet6(0xffffffffffffffff, &(0x7f0000001040)={0xa, 0x0, 0x0, @local}, &(0x7f00000010c0)=0x1c, 0x80800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000ff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) socket(0x2, 0x80805, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000011c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x0, &(0x7f0000001200)={0x7a, 0x0, 0xe0000, {r2}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 1.115030014s ago: executing program 5 (id=4081): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) lseek(r2, 0x2000, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000680)='./file1\x00', &(0x7f0000000700), &(0x7f0000000840)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c, 0x1) 1.069676325s ago: executing program 1 (id=4082): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000001900)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = gettid() ioprio_set$pid(0x4a4f9bb9883609ac, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000080)={0x36, 0x10, 0xc, 0x3, 0x3, 0x4, 0x5, 0x2e}) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 975.632386ms ago: executing program 6 (id=4083): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer=rel']) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) syz_clone3(&(0x7f0000000740)={0x400a4000, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000480), {0x30}, &(0x7f0000000580)=""/158, 0x9e, &(0x7f0000000640)=""/212, &(0x7f00000004c0)=[r6, r6, r6], 0x3}, 0x58) process_mrelease(r7, 0x0) ptrace(0x8, r6) waitid(0x1, r6, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 974.801046ms ago: executing program 3 (id=4084): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$inet(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x20, 0x4080}}], 0x1, 0x8004) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000640)={{0x2, r6, r7, r9, 0x0, 0x49, 0x6}, 0x81, 0x5, 0x8001, 0x1, 0x0, 0x0, 0x9}) getgroups(0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, r7]) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES64=r10, @ANYRESOCT=r10, @ANYRES16=r10], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) brk(0x4) 907.782687ms ago: executing program 1 (id=4085): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x900000000000000, 0x10200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 907.247057ms ago: executing program 3 (id=4086): iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x80000) lchown(0x0, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket(0x10, 0x3, 0x0) 901.540187ms ago: executing program 0 (id=4087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800008d452ed2928c355b00000000001811000040478ba29a29c66ab101cf8765bbc8f7ef5d7586ad158435f7ae8ce6ea76a888c7f91ddbf03e24464d5597abaa8cf6a0035141443ebd4cbbe094268b8162fef0c63f66b55b713542a4331dfcda5a515857aa32b5aafd59c08fd3ac4814b0fd717091b5f38835d51da142c59b962ddcbf82b2d1c8d703e0bea17423faec184ce85e", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, 0x0, 0x5) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f0000000740)=""/132, 0x76, 0x84, 0x1, 0x0, 0x10000, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000b300000000000000", @ANYRES32, @ANYBLOB="05456f4d0000000000066f7df588000000000000e71132d96c186ef18400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000400"/28], 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 792.028248ms ago: executing program 0 (id=4088): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x0) setrlimit(0x8, 0x0) getpid() sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) 672.88586ms ago: executing program 5 (id=4089): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}]}}}]}, 0x40}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendfile(r0, r0, 0x0, 0x1000000201005) creat(&(0x7f0000000000)='./bus\x00', 0x8e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 103.364939ms ago: executing program 1 (id=4090): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x52c5, &(0x7f0000000040)={0x0, 0x17c9, 0x40, 0x0, 0x3c8}) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, 0x0, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 53.257989ms ago: executing program 5 (id=4091): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x83847417e192e212, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpriority(0x1, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x593, &(0x7f0000000b80)="$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") listen(0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r9, &(0x7f0000000080)=""/202, 0xca) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x29, r7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0xde) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 32.90348ms ago: executing program 6 (id=4092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getrlimit(0xc, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_sync_file\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) unshare(0x12040400) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x0, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r2, 0x0, &(0x7f000009de80), 0x0) syz_clone3(&(0x7f00000004c0)={0x310a41600, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0xfec2, {r2}}, 0xffffffffffffffe6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0xe8, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc, 0x2}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0xb, 0x6, 0x2, 0x3, 0x24b7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0x3, 0xd, 0xf, 0x2, 0x3, 0xe, 0x2}}, {0x8, 0x2, [0x1000, 0x7ff1]}}, {{0x1c, 0x1, {0x86, 0xc, 0x4, 0xb0, 0x1, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x5b, 0x0, 0xf, 0x80, 0x0, 0x5bd6db54, 0xc0000000, 0x6}}, {0x10, 0x2, [0x3, 0x5, 0xa7b, 0x3, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x4, 0x0, 0x61a1, 0xffff, 0x2, 0x40, 0x9, 0x4}}, {0xc, 0x2, [0xfffe, 0x7fff, 0xc, 0x5d]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r3, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13002}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/260, 0x104}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r6 = syz_open_pts(r5, 0x101) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001200)={0x20000001}) r8 = dup3(r6, r5, 0x0) write$sndseq(r8, &(0x7f0000000480)=[{0x50, 0xeb, 0xf3, 0xaf, @tick=0xd63, {0x68, 0x80}, {0x5, 0x8}, @note={0x3, 0xd0, 0x4, 0xcf}}, {0x8, 0x6, 0x1, 0x2, @time={0x4, 0x400}, {0x6, 0x2}, {0x6, 0x6}, @addr={0x8, 0x6}}, {0xd2, 0x8, 0x3, 0x7, @tick=0x8, {0x3}, {0x1, 0x5}, @control={0x4e, 0x84, 0x1}}], 0x54) setsockopt$inet6_int(r8, 0x29, 0x50, &(0x7f0000000000)=0xa, 0x4) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 263.033576][ T29] audit: type=1326 audit(1747434469.451:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 263.057220][ T29] audit: type=1326 audit(1747434469.451:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 263.080960][ T29] audit: type=1326 audit(1747434469.451:13865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 263.166755][T12928] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.844734][T13021] lo speed is unknown, defaulting to 1000 [ 264.457847][T13028] futex_wake_op: syz.0.2861 tries to shift op by -1; fix this program [ 264.673755][T12928] hub 2-0:1.0: USB hub found [ 264.689503][T12928] hub 2-0:1.0: 8 ports detected [ 264.766725][T13033] futex_wake_op: syz.6.2862 tries to shift op by -1; fix this program [ 265.100351][T13041] loop6: detected capacity change from 0 to 2048 [ 265.240024][ T3304] loop6: p1 < > p4 < > [ 265.250990][T13045] loop3: detected capacity change from 0 to 2048 [ 265.266008][T13041] loop6: p1 < > p4 < > [ 265.316414][T13041] __nla_validate_parse: 4 callbacks suppressed [ 265.316430][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2865'. [ 265.347781][T13006] net_ratelimit: 24 callbacks suppressed [ 265.347801][T13006] bond3: (slave macvlan0): failed to get link speed/duplex [ 265.360959][ T3005] loop6: p1 < > p4 < > [ 265.428150][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 265.476626][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 265.479270][ T1587] bond3: (slave macvlan0): failed to get link speed/duplex [ 265.621521][T13006] bond3: (slave macvlan0): failed to get link speed/duplex [ 265.628137][T13060] futex_wake_op: syz.3.2870 tries to shift op by -1; fix this program [ 265.653819][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 265.654094][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 265.676299][T13056] lo speed is unknown, defaulting to 1000 [ 265.729596][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 265.729937][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 265.741857][ T1587] bond3: (slave macvlan0): failed to get link speed/duplex [ 265.971378][ T37] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.094788][T13006] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.130330][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2874'. [ 266.185480][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2874'. [ 266.234043][T13006] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.362137][T13006] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.370184][T13080] futex_wake_op: syz.3.2875 tries to shift op by -1; fix this program [ 266.449230][T13078] tipc: New replicast peer: 10.1.1.2 [ 266.454776][T13078] tipc: Enabled bearer , priority 10 [ 266.481833][T12999] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.507437][T13086] loop3: detected capacity change from 0 to 128 [ 266.597225][T12999] bond3: (slave macvlan0): failed to get link speed/duplex [ 266.741962][T13095] loop3: detected capacity change from 0 to 2048 [ 266.789101][T13095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.020631][T13095] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 267.032935][T13095] EXT4-fs (loop3): This should not happen!! Data will be lost [ 267.032935][T13095] [ 267.042821][T13095] EXT4-fs (loop3): Total free blocks count 0 [ 267.048870][T13095] EXT4-fs (loop3): Free/Dirty block details [ 267.054837][T13095] EXT4-fs (loop3): free_blocks=0 [ 267.059852][T13095] EXT4-fs (loop3): dirty_blocks=0 [ 267.064924][T13095] EXT4-fs (loop3): Block reservation details [ 267.070936][T13095] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 267.187632][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.204084][T13104] futex_wake_op: syz.6.2883 tries to shift op by -1; fix this program [ 267.280183][T13090] lo speed is unknown, defaulting to 1000 [ 267.314186][T13109] lo speed is unknown, defaulting to 1000 [ 267.572089][T13113] futex_wake_op: syz.6.2896 tries to shift op by -1; fix this program [ 267.614712][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2884'. [ 268.174445][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 268.174464][ T29] audit: type=1326 audit(1747434474.408:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9e3dc5927 code=0x7ffc0000 [ 268.204330][ T29] audit: type=1326 audit(1747434474.408:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9e3d6ab39 code=0x7ffc0000 [ 268.229292][ T29] audit: type=1326 audit(1747434474.408:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 268.253020][ T29] audit: type=1326 audit(1747434474.418:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9e3dc5927 code=0x7ffc0000 [ 268.276642][ T29] audit: type=1326 audit(1747434474.418:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9e3d6ab39 code=0x7ffc0000 [ 268.300208][ T29] audit: type=1326 audit(1747434474.418:14241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 268.323953][ T29] audit: type=1326 audit(1747434474.418:14242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9e3dc5927 code=0x7ffc0000 [ 268.347574][ T29] audit: type=1326 audit(1747434474.418:14243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9e3d6ab39 code=0x7ffc0000 [ 268.371089][ T29] audit: type=1326 audit(1747434474.418:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 268.394736][ T29] audit: type=1326 audit(1747434474.436:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.6.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9e3dc5927 code=0x7ffc0000 [ 268.424446][T13126] futex_wake_op: syz.3.2889 tries to shift op by -1; fix this program [ 268.472210][T13119] lo speed is unknown, defaulting to 1000 [ 268.916493][T13138] lo speed is unknown, defaulting to 1000 [ 269.923084][T13167] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 269.934774][T13167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.136761][T13174] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.201743][T13174] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.250651][T13180] lo speed is unknown, defaulting to 1000 [ 270.276544][T13174] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.332395][T13174] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.400178][T13174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.412598][T13174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.433053][T13174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.460197][T13174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.531928][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 270.614167][T13188] bond5: entered promiscuous mode [ 270.620080][T13188] bond5: entered allmulticast mode [ 270.628913][T13188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.777693][ T37] net_ratelimit: 23 callbacks suppressed [ 270.777712][ T37] bond3: (slave macvlan0): failed to get link speed/duplex [ 270.851560][T13199] lo speed is unknown, defaulting to 1000 [ 271.155029][ T37] bond3: (slave macvlan0): failed to get link speed/duplex [ 271.280417][ T1587] bond3: (slave macvlan0): failed to get link speed/duplex [ 271.397860][ T1587] bond3: (slave macvlan0): failed to get link speed/duplex [ 271.452459][T13218] futex_wake_op: syz.3.2921 tries to shift op by -1; fix this program [ 271.515213][T12999] bond3: (slave macvlan0): failed to get link speed/duplex [ 271.552976][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2924'. [ 271.745492][T13223] lo speed is unknown, defaulting to 1000 [ 271.761354][ T37] bond3: (slave macvlan0): failed to get link speed/duplex [ 271.890054][T13236] lo speed is unknown, defaulting to 1000 [ 272.360227][ T37] bond3: (slave macvlan0): failed to get link speed/duplex [ 272.500400][ T59] bond3: (slave macvlan0): failed to get link speed/duplex [ 272.617543][T10039] bond3: (slave macvlan0): failed to get link speed/duplex [ 272.654275][T13261] futex_wake_op: syz.1.2936 tries to shift op by -1; fix this program [ 272.734017][T10039] bond3: (slave macvlan0): failed to get link speed/duplex [ 273.023361][T13270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.316396][T13283] lo speed is unknown, defaulting to 1000 [ 273.731760][T13288] loop3: detected capacity change from 0 to 2048 [ 273.823264][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 273.823282][ T29] audit: type=1400 audit(1747434708.691:14614): avc: denied { create } for pid=13287 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.876099][ T29] audit: type=1400 audit(1747434708.700:14615): avc: denied { ioctl } for pid=13287 comm="syz.3.2946" path="socket:[37189]" dev="sockfs" ino=37189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.901379][ T29] audit: type=1400 audit(1747434708.700:14616): avc: denied { module_request } for pid=13287 comm="syz.3.2946" kmod="netdev-veth0_macvtap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 273.924194][ T29] audit: type=1400 audit(1747434708.728:14617): avc: denied { sys_module } for pid=13287 comm="syz.3.2946" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.930691][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'. [ 273.987494][ T29] audit: type=1400 audit(1747434708.737:14618): avc: denied { bind } for pid=13287 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.110341][T13296] 9pnet: Could not find request transport: r  [ 274.144057][ T29] audit: type=1400 audit(1747434708.981:14619): avc: denied { mount } for pid=13295 comm="+}[@" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 274.181164][T13300] futex_wake_op: syz.3.2950 tries to shift op by -1; fix this program [ 274.193145][ T29] audit: type=1326 audit(1747434709.037:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 274.216907][ T29] audit: type=1326 audit(1747434709.037:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 274.240598][ T29] audit: type=1326 audit(1747434709.037:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 274.264321][ T29] audit: type=1326 audit(1747434709.037:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.1.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 274.384367][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 274.434236][T13314] loop6: detected capacity change from 0 to 512 [ 274.443801][T13312] lo speed is unknown, defaulting to 1000 [ 274.509569][T13314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.522730][T13314] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.580855][T13308] bond4: entered promiscuous mode [ 274.588478][T13308] bond4: entered allmulticast mode [ 274.596304][T13308] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.622998][T13316] bond2: (slave veth0_to_bond): Releasing active interface [ 274.631426][T13316] bond0: (slave 77): Releasing backup interface [ 274.640356][T13316] : left promiscuous mode [ 274.654902][T13316] bond0: (slave bond_slave_1): Releasing backup interface [ 274.665305][T13316] bond_slave_1: left promiscuous mode [ 274.674354][T13316] team0: Port device team_slave_1 removed [ 274.681431][T13316] team0: Port device geneve1 removed [ 274.687848][T13316] bond2: (slave veth7): Releasing active interface [ 274.696604][T13316] bond3: (slave macvlan0): Removing an active aggregator [ 274.704342][T13316] bond3: (slave macvlan0): Releasing backup interface [ 274.724546][T13316] bond4: (slave geneve2): Releasing active interface [ 274.731314][T13316] bond4: (slave geneve2): the permanent HWaddr of slave - 8e:85:e5:4d:73:fc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 274.750119][T13316] geneve2: left allmulticast mode [ 274.757099][T13316] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.765761][T13316] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.774184][T13316] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.782684][T13316] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.796906][T13316] bond4: (slave veth9): Releasing active interface [ 274.807489][T13316] bond5: (slave veth11): Releasing active interface [ 274.878726][ T5310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.977147][T13338] lo speed is unknown, defaulting to 1000 [ 275.517349][T13348] futex_wake_op: syz.5.2965 tries to shift op by -1; fix this program [ 275.594127][T13354] netlink: 'syz.1.2969': attribute type 4 has an invalid length. [ 275.726061][T13361] lo speed is unknown, defaulting to 1000 [ 276.022323][T13371] bond6: entered promiscuous mode [ 276.027477][T13371] bond6: entered allmulticast mode [ 276.178249][T13371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.275259][T13371] bond6 (unregistering): Released all slaves [ 276.442644][T13383] futex_wake_op: syz.0.2977 tries to shift op by -1; fix this program [ 276.469777][T13381] lo speed is unknown, defaulting to 1000 [ 276.485781][T13386] $H: (slave bond_slave_0): Releasing backup interface [ 276.495199][T13386] $H: (slave bond_slave_1): Releasing backup interface [ 276.516838][T13388] futex_wake_op: syz.0.2979 tries to shift op by -1; fix this program [ 276.526992][T13386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.549536][T13386] bond0: (slave geneve2): Releasing active interface [ 276.556493][T13386] bond0: (slave geneve2): the permanent HWaddr of slave - 9a:a9:73:38:e8:56 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 276.583744][T13386] geneve2: left allmulticast mode [ 276.591358][T13386] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.599889][T13386] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.608445][T13386] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.616880][T13386] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.693652][T13386] bond0: (slave veth5): Releasing active interface [ 276.743395][T13399] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 276.783487][T13401] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2982'. [ 276.796245][T13399] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 276.827437][T13397] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2982'. [ 276.876821][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2985'. [ 276.882208][T13403] lo speed is unknown, defaulting to 1000 [ 276.901275][T13411] lo speed is unknown, defaulting to 1000 [ 276.959919][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 277.377043][T13429] futex_wake_op: syz.6.2991 tries to shift op by -1; fix this program [ 277.617225][T13434] loop3: detected capacity change from 0 to 2048 [ 277.781195][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 277.890735][T13452] netlink: 'syz.5.2999': attribute type 13 has an invalid length. [ 278.136166][T13460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.147176][T13464] bond5: entered promiscuous mode [ 278.152268][T13464] bond5: entered allmulticast mode [ 278.159324][T13464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.173747][T13464] bond5 (unregistering): Released all slaves [ 278.251263][T13476] lo speed is unknown, defaulting to 1000 [ 278.374651][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 278.383647][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 278.410448][T13489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13489 comm=syz.0.3006 [ 278.446382][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 278.473921][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 278.482939][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 278.501057][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3012'. [ 278.755352][T13492] lo speed is unknown, defaulting to 1000 [ 279.135808][T13521] futex_wake_op: syz.1.3018 tries to shift op by -1; fix this program [ 279.174480][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 279.174494][ T29] audit: type=1326 audit(1747434713.695:14805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.320718][ T29] audit: type=1326 audit(1747434713.732:14806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.344471][ T29] audit: type=1326 audit(1747434713.732:14807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.368355][ T29] audit: type=1326 audit(1747434713.732:14808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.392018][ T29] audit: type=1326 audit(1747434713.732:14809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.408842][T13525] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 279.417018][ T29] audit: type=1326 audit(1747434713.732:14810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 279.447322][ T29] audit: type=1326 audit(1747434713.732:14811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb75437e9a3 code=0x7ffc0000 [ 279.470810][ T29] audit: type=1326 audit(1747434713.770:14812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb75437d41f code=0x7ffc0000 [ 279.494240][ T29] audit: type=1326 audit(1747434713.779:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb75437e9f7 code=0x7ffc0000 [ 279.518212][ T29] audit: type=1326 audit(1747434713.789:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13518 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb75437d2d0 code=0x7ffc0000 [ 279.702618][T13541] futex_wake_op: syz.1.3027 tries to shift op by -1; fix this program [ 279.854609][T13553] lo speed is unknown, defaulting to 1000 [ 280.380514][T13569] C: renamed from team_slave_0 [ 280.395870][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 280.406709][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3038'. [ 280.427365][T13569] netlink: 'syz.0.3037': attribute type 1 has an invalid length. [ 280.435227][T13569] net_ratelimit: 10 callbacks suppressed [ 280.435244][T13569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.559062][T13577] futex_wake_op: syz.1.3040 tries to shift op by -1; fix this program [ 281.332057][T13589] futex_wake_op: syz.3.3045 tries to shift op by -1; fix this program [ 281.342050][T13586] siw: device registration error -23 [ 281.361647][T13586] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 281.381449][T13586] team0: Device macvtap0 is already an upper device of the team interface [ 281.468644][T13591] loop3: detected capacity change from 0 to 2048 [ 281.524136][T13591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.820060][T13593] Set syz1 is full, maxelem 65536 reached [ 281.921245][T13616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.029301][T13620] infiniband syz!: set down [ 282.033892][T13620] infiniband syz!: added team_slave_0 [ 282.054242][T13620] RDS/IB: syz!: added [ 282.066960][T13620] smc: adding ib device syz! with port count 1 [ 282.116106][T13620] smc: ib device syz! port 1 has pnetid [ 282.368277][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.511680][T13635] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 282.589570][T13643] __nla_validate_parse: 3 callbacks suppressed [ 282.589620][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 282.598725][T13642] loop3: detected capacity change from 0 to 2048 [ 282.619519][T13645] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 282.629803][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 282.684859][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 282.761907][T13658] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.770374][T13658] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.778797][T13658] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.787235][T13658] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.797681][T13658] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 283.038187][T13686] lo speed is unknown, defaulting to 1000 [ 283.415498][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3078'. [ 283.473081][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'. [ 283.851466][T13709] capability: warning: `syz.1.3080' uses 32-bit capabilities (legacy support in use) [ 284.001051][T13712] x_tables: duplicate underflow at hook 1 [ 284.333594][T13737] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 284.640467][T13750] lo speed is unknown, defaulting to 1000 [ 284.915412][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 284.915440][ T29] audit: type=1326 audit(1747435232.065:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 284.960157][ T29] audit: type=1326 audit(1747435232.093:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 284.983968][ T29] audit: type=1326 audit(1747435232.093:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.007629][ T29] audit: type=1326 audit(1747435232.103:15105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.031493][ T29] audit: type=1326 audit(1747435232.103:15106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.055332][ T29] audit: type=1326 audit(1747435232.140:15107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.079164][ T29] audit: type=1326 audit(1747435232.159:15108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.102794][ T29] audit: type=1326 audit(1747435232.159:15109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.126501][ T29] audit: type=1326 audit(1747435232.159:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.150231][ T29] audit: type=1326 audit(1747435232.159:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 285.259529][T13762] futex_wake_op: syz.3.3100 tries to shift op by -1; fix this program [ 285.348593][T13766] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 285.422942][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3105'. [ 285.448635][T13775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.457012][T13775] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 285.466043][T13775] team0: Failed to send options change via netlink (err -105) [ 285.473565][T13775] team0: Port device batadv0 added [ 285.630955][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 286.141398][T13804] lo speed is unknown, defaulting to 1000 [ 286.574042][T13810] loop3: detected capacity change from 0 to 736 [ 286.870094][T13814] netlink: 'syz.3.3120': attribute type 33 has an invalid length. [ 286.878121][T13814] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3120'. [ 286.898371][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 286.964690][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 287.536045][T13853] futex_wake_op: syz.1.3133 tries to shift op by -1; fix this program [ 287.743806][T13860] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.012999][T13865] __nla_validate_parse: 5 callbacks suppressed [ 288.013015][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 288.056295][T13865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.064651][T13865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.072949][T13865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.081302][T13865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.101891][T13865] vxlan0: entered promiscuous mode [ 288.431591][T13871] tipc: Enabling of bearer rejected, failed to enable media [ 288.528053][T13808] Set syz1 is full, maxelem 65536 reached [ 288.602110][T13879] 9pnet_fd: Insufficient options for proto=fd [ 288.619851][T13881] futex_wake_op: syz.3.3144 tries to shift op by -1; fix this program [ 288.636264][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 288.686077][T13887] netlink: 'syz.3.3146': attribute type 10 has an invalid length. [ 288.694534][T13887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3146'. [ 288.767022][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 288.861587][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3147'. [ 288.900055][T13904] futex_wake_op: syz.5.3151 tries to shift op by -1; fix this program [ 289.090615][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3156'. [ 289.099741][T13918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3156'. [ 289.409868][T13931] futex_wake_op: syz.1.3162 tries to shift op by -1; fix this program [ 289.510462][T13935] lo speed is unknown, defaulting to 1000 [ 289.658363][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3166'. [ 289.696365][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3166'. [ 289.796750][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 289.923001][T13952] loop3: detected capacity change from 0 to 2048 [ 289.945900][T13953] netlink: zone id is out of range [ 289.951083][T13953] netlink: zone id is out of range [ 289.956295][T13953] netlink: zone id is out of range [ 289.961457][T13953] netlink: zone id is out of range [ 289.966616][T13953] netlink: zone id is out of range [ 289.971818][T13953] netlink: zone id is out of range [ 289.976945][T13953] netlink: zone id is out of range [ 289.982088][T13953] netlink: zone id is out of range [ 289.987244][T13953] netlink: zone id is out of range [ 290.071696][T13952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.146140][T13961] futex_wake_op: syz.5.3173 tries to shift op by -1; fix this program [ 290.187361][T13952] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 290.199776][T13952] EXT4-fs (loop3): This should not happen!! Data will be lost [ 290.199776][T13952] [ 290.209468][T13952] EXT4-fs (loop3): Total free blocks count 0 [ 290.215612][T13952] EXT4-fs (loop3): Free/Dirty block details [ 290.221544][T13952] EXT4-fs (loop3): free_blocks=0 [ 290.226660][T13952] EXT4-fs (loop3): dirty_blocks=0 [ 290.231688][T13952] EXT4-fs (loop3): Block reservation details [ 290.237812][T13952] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 290.278303][T13969] futex_wake_op: syz.1.3174 tries to shift op by -1; fix this program [ 290.302176][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.317867][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 290.317953][ T29] audit: type=1400 audit(1747435237.116:15370): avc: denied { getopt } for pid=13970 comm="syz.0.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.363569][T13974] netlink: 'syz.5.3176': attribute type 16 has an invalid length. [ 290.371474][T13974] netlink: 'syz.5.3176': attribute type 17 has an invalid length. [ 290.384274][ T29] audit: type=1326 audit(1747435237.144:15371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.408884][ T29] audit: type=1326 audit(1747435237.144:15372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.432660][ T29] audit: type=1326 audit(1747435237.144:15373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.439703][T13974] vlan0: entered allmulticast mode [ 290.457258][ T29] audit: type=1326 audit(1747435237.144:15374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.485275][ T29] audit: type=1326 audit(1747435237.144:15375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.509702][ T29] audit: type=1326 audit(1747435237.144:15376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.534070][ T29] audit: type=1326 audit(1747435237.144:15377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.541377][T13983] 9pnet_fd: Insufficient options for proto=fd [ 290.557758][ T29] audit: type=1326 audit(1747435237.144:15378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.557810][ T29] audit: type=1326 audit(1747435237.144:15379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 290.753879][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.763136][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.782781][T13998] loop3: detected capacity change from 0 to 512 [ 290.794112][T13998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.817165][T13998] EXT4-fs (loop3): 1 truncate cleaned up [ 290.824928][T13998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.294787][T14008] futex_wake_op: syz.1.3187 tries to shift op by -1; fix this program [ 291.321902][T14011] futex_wake_op: syz.6.3189 tries to shift op by -1; fix this program [ 291.463649][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.556072][T14020] futex_wake_op: syz.6.3192 tries to shift op by -1; fix this program [ 291.597818][T14021] loop3: detected capacity change from 0 to 512 [ 291.636527][T14021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 291.680829][T14021] System zones: 1-12 [ 291.685202][T14021] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.3191: corrupted xattr block 255: invalid header [ 291.703539][T14021] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 291.712264][T14021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.724947][T14021] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.3191: corrupted xattr block 255: invalid header [ 291.743306][T14027] 9pnet_fd: Insufficient options for proto=fd [ 291.754296][T14021] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 291.762057][T14021] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.926281][T14031] loop3: detected capacity change from 0 to 2048 [ 292.069033][T14041] futex_wake_op: syz.0.3199 tries to shift op by -1; fix this program [ 292.207167][T14048] futex_wake_op: syz.0.3200 tries to shift op by -1; fix this program [ 292.795245][T14053] loop3: detected capacity change from 0 to 256 [ 293.333737][T14063] lo speed is unknown, defaulting to 1000 [ 294.208800][T14072] bridge0: entered allmulticast mode [ 294.550785][T14078] futex_wake_op: syz.6.3210 tries to shift op by -1; fix this program [ 294.781141][T14080] futex_wake_op: syz.6.3211 tries to shift op by -1; fix this program [ 295.170506][T14084] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 296.031200][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 296.031214][ T29] audit: type=1326 audit(1747435242.467:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.097908][ T29] audit: type=1326 audit(1747435242.495:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.121636][ T29] audit: type=1326 audit(1747435242.495:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.145469][ T29] audit: type=1326 audit(1747435242.523:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.169033][ T29] audit: type=1326 audit(1747435242.523:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.192734][ T29] audit: type=1326 audit(1747435242.523:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.216407][ T29] audit: type=1326 audit(1747435242.523:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.240057][ T29] audit: type=1400 audit(1747435242.523:15772): avc: denied { rename } for pid=14092 comm="syz.0.3216" name="file0" dev="tmpfs" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 296.262931][ T29] audit: type=1326 audit(1747435242.523:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.286606][ T29] audit: type=1326 audit(1747435242.523:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 296.287606][T14096] futex_wake_op: syz.6.3217 tries to shift op by -1; fix this program [ 296.432847][T14107] xt_socket: unknown flags 0xc [ 296.441826][T14102] __nla_validate_parse: 3 callbacks suppressed [ 296.441845][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 296.518106][T14105] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 296.661572][T14119] net_ratelimit: 334 callbacks suppressed [ 296.661591][T14119] xfrm0: mtu less than device minimum [ 296.816271][T14102] Set syz1 is full, maxelem 65536 reached [ 296.909843][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 296.966882][T14139] futex_wake_op: syz.3.3230 tries to shift op by -1; fix this program [ 296.984274][T14141] futex_wake_op: syz.0.3231 tries to shift op by -1; fix this program [ 297.005499][T14143] tipc: New replicast peer: 255.255.255.255 [ 297.011700][T14143] tipc: Enabled bearer , priority 10 [ 297.071965][T14146] loop3: detected capacity change from 0 to 256 [ 297.368794][T14166] futex_wake_op: syz.3.3243 tries to shift op by -1; fix this program [ 297.408031][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3241'. [ 297.471156][T14174] futex_wake_op: syz.6.3245 tries to shift op by -1; fix this program [ 297.630842][T14175] loop3: detected capacity change from 0 to 8192 [ 297.768269][T14187] lo speed is unknown, defaulting to 1000 [ 298.283312][T14191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.804160][T14196] loop3: detected capacity change from 0 to 2048 [ 298.852095][ T3304] Alternate GPT is invalid, using primary GPT. [ 298.858494][ T3304] loop3: p1 p2 p3 [ 299.145479][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3255'. [ 299.187048][T14196] Alternate GPT is invalid, using primary GPT. [ 299.194060][T14196] loop3: p1 p2 p3 [ 299.236999][T14212] futex_wake_op: syz.5.3256 tries to shift op by -1; fix this program [ 299.422959][T14215] netlink: 'syz.3.3257': attribute type 13 has an invalid length. [ 299.440633][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 299.448057][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 299.452532][T14215] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.462068][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 299.468613][T14215] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.486846][T14215] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.495282][T14215] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.560317][T14215] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.568882][T14215] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.577337][T14215] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.585810][T14215] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.981055][T14229] xt_socket: unknown flags 0xc [ 299.998859][T14227] batadv_slave_1 (unregistering): left promiscuous mode [ 300.119016][T14242] futex_wake_op: syz.0.3268 tries to shift op by -1; fix this program [ 300.350009][T14267] lo: entered promiscuous mode [ 300.354925][T14267] lo: entered allmulticast mode [ 300.378560][T14269] xt_socket: unknown flags 0xc [ 300.646785][T14276] loop3: detected capacity change from 0 to 512 [ 300.682830][T14276] EXT4-fs (loop3): 1 orphan inode deleted [ 300.689182][T14276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.702656][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 300.715206][T14276] ext4 filesystem being mounted at /622/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.825374][T14281] futex_wake_op: syz.1.3281 tries to shift op by -1; fix this program [ 301.189170][T14292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3285'. [ 301.198266][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 301.279717][T14295] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.587284][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 301.587303][ T29] audit: type=1326 audit(1747435247.658:16406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.620163][ T29] audit: type=1326 audit(1747435247.658:16407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.644647][ T29] audit: type=1326 audit(1747435247.668:16408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.668232][ T29] audit: type=1326 audit(1747435247.668:16409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.692579][ T29] audit: type=1326 audit(1747435247.668:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.716197][ T29] audit: type=1326 audit(1747435247.668:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.740556][ T29] audit: type=1326 audit(1747435247.686:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.764165][ T29] audit: type=1326 audit(1747435247.686:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.788513][ T29] audit: type=1326 audit(1747435247.686:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.812187][ T29] audit: type=1326 audit(1747435247.686:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.0.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 301.856377][T14310] tipc: Enabling of bearer rejected, already enabled [ 301.870627][T14310] netlink: 300 bytes leftover after parsing attributes in process `+}[@'. [ 301.896599][T14308] lo speed is unknown, defaulting to 1000 [ 301.911476][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.015220][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 302.203955][T14333] gtp0: entered allmulticast mode [ 302.374550][T14338] loop3: detected capacity change from 0 to 2048 [ 302.522782][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3292'. [ 302.628986][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 302.637965][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 302.653982][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3307'. [ 302.674525][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 302.695864][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 302.704815][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 302.759314][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'. [ 303.057950][T14392] futex_wake_op: syz.0.3319 tries to shift op by -1; fix this program [ 303.258157][T14401] veth5: left promiscuous mode [ 303.799412][T14431] TCP: out of memory -- consider tuning tcp_mem [ 303.956703][T14434] loop3: detected capacity change from 0 to 2048 [ 304.158547][T14446] netlink: 'syz.5.3336': attribute type 10 has an invalid length. [ 304.486448][T14470] lo speed is unknown, defaulting to 1000 [ 304.758248][T14468] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 305.303996][T14497] lo speed is unknown, defaulting to 1000 [ 305.663107][T14536] xt_hashlimit: max too large, truncated to 1048576 [ 305.882145][T14554] tipc: Bearer : already 2 bearers with priority 10 [ 305.917250][T14554] tipc: Bearer : trying with adjusted priority [ 305.929795][T14554] tipc: New replicast peer: 255.255.255.255 [ 305.938080][T14554] tipc: Enabled bearer , priority 9 [ 305.988536][T14562] futex_wake_op: syz.5.3359 tries to shift op by -1; fix this program [ 306.049525][T14564] lo speed is unknown, defaulting to 1000 [ 306.279641][T14578] tipc: Enabled bearer , priority 0 [ 306.342451][T14570] tipc: Disabling bearer [ 306.560643][T14593] loop3: detected capacity change from 0 to 2048 [ 306.734177][T14593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.965346][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 306.965363][ T29] audit: type=1326 audit(1747435252.691:16805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 306.995193][ T29] audit: type=1326 audit(1747435252.691:16806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.018923][ T29] audit: type=1326 audit(1747435252.691:16807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.044203][ T29] audit: type=1326 audit(1747435252.700:16808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.067873][ T29] audit: type=1326 audit(1747435252.700:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.091850][ T29] audit: type=1326 audit(1747435252.766:16810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.116482][ T29] audit: type=1326 audit(1747435252.766:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.140210][ T29] audit: type=1326 audit(1747435252.766:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.164474][ T29] audit: type=1326 audit(1747435252.766:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.188176][ T29] audit: type=1326 audit(1747435252.766:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 307.259824][T14606] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 307.272221][T14606] EXT4-fs (loop3): This should not happen!! Data will be lost [ 307.272221][T14606] [ 307.281975][T14606] EXT4-fs (loop3): Total free blocks count 0 [ 307.287996][T14606] EXT4-fs (loop3): Free/Dirty block details [ 307.293911][T14606] EXT4-fs (loop3): free_blocks=0 [ 307.298887][T14606] EXT4-fs (loop3): dirty_blocks=0 [ 307.303992][T14606] EXT4-fs (loop3): Block reservation details [ 307.310044][T14606] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 307.316289][T14610] __nla_validate_parse: 8 callbacks suppressed [ 307.316334][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'. [ 307.411173][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.525159][T14620] lo speed is unknown, defaulting to 1000 [ 307.567056][T14624] loop3: detected capacity change from 0 to 256 [ 307.617185][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 308.323557][T14645] netlink: 'syz.5.3387': attribute type 1 has an invalid length. [ 308.402575][T14645] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 308.441424][T10039] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.452086][T14645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.483745][T14649] loop3: detected capacity change from 0 to 2048 [ 308.511397][T14645] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 308.520857][T14645] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 308.533520][T14645] bond6 (unregistering): Released all slaves [ 308.608639][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3391'. [ 308.686118][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 308.801811][T14670] futex_wake_op: syz.6.3395 tries to shift op by -1; fix this program [ 309.285002][T14679] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.293154][T14679] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 309.439552][T14683] netlink: 'syz.3.3400': attribute type 4 has an invalid length. [ 309.457272][T14683] netlink: 'syz.3.3400': attribute type 4 has an invalid length. [ 309.772340][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3405'. [ 309.798532][T14704] futex_wake_op: syz.3.3406 tries to shift op by -1; fix this program [ 309.997291][T14721] loop3: detected capacity change from 0 to 512 [ 310.037551][T14721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 310.558248][T14742] futex_wake_op: syz.5.3419 tries to shift op by -1; fix this program [ 310.906909][T14721] EXT4-fs (loop3): 1 truncate cleaned up [ 310.920726][T14721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.179615][T14753] tipc: Enabling of bearer rejected, already enabled [ 311.385182][T14758] futex_wake_op: syz.5.3424 tries to shift op by -1; fix this program [ 311.462913][T14764] 9pnet_fd: Insufficient options for proto=fd [ 311.543091][T14766] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.550487][T14768] netlink: 'syz.5.3428': attribute type 13 has an invalid length. [ 311.633746][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.725988][T14780] futex_wake_op: syz.0.3433 tries to shift op by -1; fix this program [ 311.746607][T14777] sch_tbf: burst 3092 is lower than device lo mtu (11337746) ! [ 311.849457][T14787] sctp: [Deprecated]: syz.1.3436 (pid 14787) Use of int in max_burst socket option. [ 311.849457][T14787] Use struct sctp_assoc_value instead [ 312.059338][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 312.069078][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 312.129157][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 312.155034][T14804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3442'. [ 312.255163][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 312.546565][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 312.546582][ T29] audit: type=1400 audit(1747435257.826:17402): avc: denied { read } for pid=14809 comm="syz.3.3443" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 312.577151][ T29] audit: type=1400 audit(1747435257.826:17403): avc: denied { open } for pid=14809 comm="syz.3.3443" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 312.602695][ T29] audit: type=1400 audit(1747435257.826:17404): avc: denied { ioctl } for pid=14809 comm="syz.3.3443" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 312.924024][T14816] netlink: 'syz.1.3445': attribute type 13 has an invalid length. [ 313.283002][ T29] audit: type=1326 audit(1747435258.537:17405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.307469][ T29] audit: type=1326 audit(1747435258.537:17406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.331239][ T29] audit: type=1326 audit(1747435258.537:17407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.355496][ T29] audit: type=1326 audit(1747435258.537:17408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.379173][ T29] audit: type=1326 audit(1747435258.537:17409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.403526][ T29] audit: type=1326 audit(1747435258.546:17410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.427229][ T29] audit: type=1326 audit(1747435258.546:17411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14826 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7ffc0000 [ 313.513864][T14816] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.522341][T14816] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.530984][T14816] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.539554][T14816] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.823868][T14830] lo speed is unknown, defaulting to 1000 [ 313.908045][T14834] __nla_validate_parse: 5 callbacks suppressed [ 313.908060][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3452'. [ 314.500002][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3455'. [ 314.509204][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3455'. [ 314.785634][T14856] xt_hashlimit: max too large, truncated to 1048576 [ 314.898796][T14860] futex_wake_op: syz.1.3459 tries to shift op by -1; fix this program [ 315.400157][T14865] netlink: 'syz.3.3461': attribute type 13 has an invalid length. [ 315.495066][T14867] futex_wake_op: syz.1.3462 tries to shift op by -1; fix this program [ 315.573164][T14869] loop3: detected capacity change from 0 to 2048 [ 315.657012][T14869] EXT4-fs (loop3): failed to initialize system zone (-117) [ 315.702427][T14869] EXT4-fs (loop3): mount failed [ 315.723197][T14878] futex_wake_op: syz.1.3466 tries to shift op by -1; fix this program [ 315.835984][T14886] futex_wake_op: syz.3.3470 tries to shift op by -1; fix this program [ 316.690390][T14911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3478'. [ 317.045463][T14921] lo speed is unknown, defaulting to 1000 [ 317.409695][T14937] futex_wake_op: syz.3.3486 tries to shift op by -1; fix this program [ 317.530504][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 317.539924][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3484'. [ 317.864207][T14961] netlink: 'syz.6.3493': attribute type 21 has an invalid length. [ 317.872140][T14961] netlink: 'syz.6.3493': attribute type 20 has an invalid length. [ 317.879978][T14961] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.985446][T14963] netlink: 'syz.1.3494': attribute type 10 has an invalid length. [ 317.994081][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3494'. [ 318.049852][T14963] !: entered promiscuous mode [ 318.061209][T14963] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 318.204728][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 318.204742][ T29] audit: type=1326 audit(1747435263.205:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.347941][ T29] audit: type=1326 audit(1747435263.242:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.371758][ T29] audit: type=1326 audit(1747435263.242:17683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.395525][ T29] audit: type=1326 audit(1747435263.242:17684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.419412][ T29] audit: type=1326 audit(1747435263.242:17685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.443115][ T29] audit: type=1326 audit(1747435263.242:17686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.466720][ T29] audit: type=1326 audit(1747435263.242:17687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.490329][ T29] audit: type=1326 audit(1747435263.242:17688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 318.513806][ T29] audit: type=1326 audit(1747435263.242:17689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc405b05927 code=0x7ffc0000 [ 318.537338][ T29] audit: type=1326 audit(1747435263.242:17690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.1.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc405aaab39 code=0x7ffc0000 [ 319.095753][T14977] loop3: detected capacity change from 0 to 1024 [ 319.154617][T14977] EXT4-fs: Ignoring removed nobh option [ 319.160361][T14977] EXT4-fs: Ignoring removed bh option [ 319.220984][T14977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.320183][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3502'. [ 319.354723][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.585754][T15003] lo speed is unknown, defaulting to 1000 [ 319.613424][T15008] futex_wake_op: syz.0.3510 tries to shift op by -1; fix this program [ 319.725333][T15006] lo speed is unknown, defaulting to 1000 [ 319.831772][T15021] veth0_vlan: entered allmulticast mode [ 320.100391][T15028] veth0_vlan: left promiscuous mode [ 320.105686][T15028] veth0_vlan: entered promiscuous mode [ 320.645710][T15038] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3521'. [ 320.661273][T15038] loop3: detected capacity change from 0 to 1024 [ 320.678943][T15038] EXT4-fs: Ignoring removed bh option [ 320.684530][T15038] EXT4-fs: inline encryption not supported [ 320.708687][T15038] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.722189][T15041] futex_wake_op: syz.1.3522 tries to shift op by -1; fix this program [ 320.770830][T15043] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 320.780653][T15038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 320.793514][T15038] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.3521: lblock 2 mapped to illegal pblock 2 (length 1) [ 320.808704][T15038] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.3521: lblock 0 mapped to illegal pblock 48 (length 1) [ 320.824308][T15038] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3521: Failed to acquire dquot type 0 [ 320.837548][T15038] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 320.848185][T15038] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.3521: mark_inode_dirty error [ 320.860079][T15038] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 320.872355][T15038] EXT4-fs (loop3): 1 orphan inode deleted [ 320.878652][T15038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.892989][ T59] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.909244][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 320.954013][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.975347][T15051] !: left promiscuous mode [ 320.984091][T15051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.000299][ T3318] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 321.043363][ T3318] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 321.053137][ T3318] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 321.065139][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3527'. [ 321.074227][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3527'. [ 321.104221][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3528'. [ 321.113431][T15056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3528'. [ 321.141769][T15058] loop3: detected capacity change from 0 to 2048 [ 321.159386][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 321.181355][T15060] lo speed is unknown, defaulting to 1000 [ 321.218811][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 321.261118][T15064] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 321.367130][T15066] program syz.3.3531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.390649][T15066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 321.428299][T15070] futex_wake_op: syz.3.3533 tries to shift op by -1; fix this program [ 321.536071][T15074] loop3: detected capacity change from 0 to 2048 [ 321.595864][T15074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.635752][T15074] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.735033][T15074] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3535: bg 0: block 345: padding at end of block bitmap is not set [ 321.803289][T15074] batadv_slave_1 (unregistering): left promiscuous mode [ 321.864532][T15085] wireguard0: entered promiscuous mode [ 321.870234][T15085] wireguard0: entered allmulticast mode [ 322.008078][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.121397][T15095] loop3: detected capacity change from 0 to 2048 [ 322.216075][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 322.995392][T15118] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 323.379317][T15128] openvswitch: netlink: Message has 6 unknown bytes. [ 323.555783][T15135] futex_wake_op: syz.6.3553 tries to shift op by -1; fix this program [ 323.572286][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 323.572303][ T29] audit: type=1326 audit(1747435268.228:18400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc405b05927 code=0x7ffc0000 [ 323.602156][ T29] audit: type=1326 audit(1747435268.228:18401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc405aaab39 code=0x7ffc0000 [ 323.625778][ T29] audit: type=1326 audit(1747435268.228:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 323.663391][T15138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.706317][T15142] loop3: detected capacity change from 0 to 1024 [ 323.712727][ T29] audit: type=1326 audit(1747435268.274:18403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc405b05927 code=0x7ffc0000 [ 323.712770][ T29] audit: type=1326 audit(1747435268.274:18404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc405aaab39 code=0x7ffc0000 [ 323.712867][ T29] audit: type=1326 audit(1747435268.274:18405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 323.783779][ T29] audit: type=1326 audit(1747435268.284:18406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 323.807463][ T29] audit: type=1326 audit(1747435268.284:18407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 323.831166][ T29] audit: type=1326 audit(1747435268.284:18408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc405b05927 code=0x7ffc0000 [ 323.854770][ T29] audit: type=1326 audit(1747435268.284:18409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.1.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc405aaab39 code=0x7ffc0000 [ 323.929764][T15142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.087862][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.131422][T15158] lo speed is unknown, defaulting to 1000 [ 324.833259][T15166] loop3: detected capacity change from 0 to 512 [ 324.891102][T15166] ext4: Unknown parameter 'pcr' [ 325.353904][T15177] __nla_validate_parse: 2 callbacks suppressed [ 325.353924][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 325.765130][T15195] futex_wake_op: syz.1.3571 tries to shift op by -1; fix this program [ 325.821193][T15197] infiniband yz!: set down [ 325.825815][T15197] infiniband yz!: added team_slave_0 [ 325.844565][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 325.884249][T15205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3574'. [ 325.894721][T15197] RDS/IB: yz!: added [ 325.902736][T15197] smc: adding ib device yz! with port count 1 [ 325.908932][T15197] smc: ib device yz! port 1 has pnetid [ 326.244839][T15212] loop3: detected capacity change from 0 to 1024 [ 326.256650][T15212] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 326.433122][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3579'. [ 326.446263][T15225] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3581'. [ 326.457664][T15225] gretap0: entered promiscuous mode [ 326.471849][T15225] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3581'. [ 326.475965][T15227] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 326.490413][T15225] 0XD: renamed from gretap0 [ 326.498377][T15225] 0XD: left promiscuous mode [ 326.503290][T15225] 0XD: entered allmulticast mode [ 326.511426][T15225] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 326.583849][T15236] wireguard0: entered promiscuous mode [ 326.589384][T15236] wireguard0: entered allmulticast mode [ 326.595717][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3584'. [ 326.617615][T15240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15240 comm=syz.0.3585 [ 326.847013][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'. [ 326.883606][T15265] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.893535][T15265] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 326.918658][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3597'. [ 326.948711][T15265] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.958690][T15265] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.002176][T15265] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.012054][T15265] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.055598][T15265] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.066092][T15265] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.127495][T15265] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.136592][T15265] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.148407][T15265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.156863][T15265] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.170381][T15265] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.178859][T15265] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.195745][T15265] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.204257][T15265] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.409636][T15286] loop3: detected capacity change from 0 to 512 [ 327.417624][T15286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.436595][T15286] EXT4-fs (loop3): 1 truncate cleaned up [ 327.443478][T15286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.493988][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.493998][T15290] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 327.831916][T15331] dvmrp5: entered allmulticast mode [ 327.847529][T15328] dvmrp5: left allmulticast mode [ 328.329549][T15341] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 328.685035][T15355] loop3: detected capacity change from 0 to 2048 [ 328.838987][T15360] loop3: detected capacity change from 0 to 2048 [ 328.895557][T15360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.951601][ T29] kauditd_printk_skb: 2681 callbacks suppressed [ 328.951623][ T29] audit: type=1400 audit(1747435273.260:21091): avc: denied { ioctl } for pid=15369 comm="syz.6.3628" path="socket:[44165]" dev="sockfs" ino=44165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.031013][T15376] ref_ctr_offset mismatch. inode: 0xc7c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 329.061017][ T29] audit: type=1326 audit(1747435273.316:21092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15369 comm="syz.6.3628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e3dce969 code=0x0 [ 329.250818][ T29] audit: type=1326 audit(1747435273.541:21093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.274553][ T29] audit: type=1326 audit(1747435273.541:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.346336][ T29] audit: type=1326 audit(1747435273.541:21095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.370090][ T29] audit: type=1326 audit(1747435273.541:21096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.393748][ T29] audit: type=1326 audit(1747435273.541:21097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.417483][ T29] audit: type=1326 audit(1747435273.597:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 329.441155][ T29] audit: type=1326 audit(1747435273.597:21099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb75437e9a3 code=0x7ffc0000 [ 329.464660][ T29] audit: type=1326 audit(1747435273.597:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15382 comm="syz.5.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb75437d41f code=0x7ffc0000 [ 329.719058][T15385] netlink: 'syz.1.3632': attribute type 4 has an invalid length. [ 329.774856][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.850822][T15402] netlink: 'syz.3.3636': attribute type 1 has an invalid length. [ 329.874646][T15402] loop3: detected capacity change from 0 to 1024 [ 329.911660][T15402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.952165][T15402] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.024623][T15415] futex_wake_op: syz.6.3644 tries to shift op by -1; fix this program [ 330.070506][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.350170][T15425] loop3: detected capacity change from 0 to 8192 [ 330.411198][T15425] loop3: p3 p4 < > [ 330.415297][T15425] loop3: p3 start 619312 is beyond EOD, truncated [ 330.536862][T15436] program syz.3.3645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.550211][T15436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 330.676032][T15440] 9pnet: Could not find request transport: fd^Hn7GݦG__V9]Rxo\}oQ7IxA [ 330.808841][T15444] __nla_validate_parse: 10 callbacks suppressed [ 330.808924][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'. [ 330.878142][T15452] futex_wake_op: syz.5.3656 tries to shift op by -1; fix this program [ 331.239739][T15474] can0: slcan on ttyS3. [ 331.287748][T15473] can0 (unregistered): slcan off ttyS3. [ 331.673019][T15483] loop3: detected capacity change from 0 to 2048 [ 331.710881][T15483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.845990][T15483] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 331.858294][T15483] EXT4-fs (loop3): This should not happen!! Data will be lost [ 331.858294][T15483] [ 331.868165][T15483] EXT4-fs (loop3): Total free blocks count 0 [ 331.874181][T15483] EXT4-fs (loop3): Free/Dirty block details [ 331.880123][T15483] EXT4-fs (loop3): free_blocks=0 [ 331.885102][T15483] EXT4-fs (loop3): dirty_blocks=0 [ 331.890230][T15483] EXT4-fs (loop3): Block reservation details [ 331.896293][T15483] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 332.111355][T15497] futex_wake_op: syz.1.3671 tries to shift op by -1; fix this program [ 332.121561][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.181339][T15503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 332.191980][T15501] loop3: detected capacity change from 0 to 2048 [ 332.228889][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3674'. [ 332.261632][T15510] futex_wake_op: syz.6.3676 tries to shift op by -1; fix this program [ 332.291558][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'. [ 332.430513][T15525] lo: left promiscuous mode [ 332.435144][T15525] lo: left allmulticast mode [ 332.458349][T15525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.470085][T15525] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.488386][T15525] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 332.598803][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3684'. [ 332.828355][T15544] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.848986][T15546] futex_wake_op: syz.3.3688 tries to shift op by -1; fix this program [ 333.114202][T15551] loop3: detected capacity change from 0 to 2048 [ 333.175556][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3694'. [ 333.184671][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3694'. [ 333.193733][T15560] netlink: 'syz.5.3694': attribute type 4 has an invalid length. [ 333.209313][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 333.220335][T15560] team0: Port device batadv0 removed [ 333.242173][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 333.274071][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3694'. [ 333.422188][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.431374][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.448601][T15573] siw: device registration error -23 [ 333.597817][T15582] futex_wake_op: syz.1.3702 tries to shift op by -1; fix this program [ 333.633432][T15584] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 333.692329][T15591] netlink: 'syz.5.3703': attribute type 33 has an invalid length. [ 333.700249][T15591] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3703'. [ 333.735923][T15595] 9pnet_fd: Insufficient options for proto=fd [ 333.801102][T15600] netlink: 'syz.1.3708': attribute type 4 has an invalid length. [ 333.858946][T15604] 0X: left allmulticast mode [ 333.864116][T15604] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 334.097505][T15615] futex_wake_op: syz.1.3714 tries to shift op by -1; fix this program [ 334.422283][T15628] 9pnet_fd: Insufficient options for proto=fd [ 334.459411][T15630] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 334.479651][T15630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.487987][T15630] bond5: (slave batadv0): Enslaving as a backup interface with an up link [ 334.499763][T15630] bond5 (unregistering): (slave batadv0): Releasing backup interface [ 334.509228][T15630] bond5 (unregistering): Released all slaves [ 334.631105][ T29] kauditd_printk_skb: 1147 callbacks suppressed [ 334.631119][ T29] audit: type=1326 audit(1747435278.564:22248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.689612][ T29] audit: type=1326 audit(1747435278.601:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.713615][ T29] audit: type=1326 audit(1747435278.601:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.737205][ T29] audit: type=1326 audit(1747435278.601:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.761030][ T29] audit: type=1326 audit(1747435278.601:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.784782][ T29] audit: type=1326 audit(1747435278.601:22253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.808530][ T29] audit: type=1326 audit(1747435278.601:22254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.832447][ T29] audit: type=1326 audit(1747435278.601:22255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.856136][ T29] audit: type=1326 audit(1747435278.611:22256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.877443][T15645] lo speed is unknown, defaulting to 1000 [ 334.879859][ T29] audit: type=1326 audit(1747435278.611:22257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 334.916521][T15646] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 335.196077][T15657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 335.202713][T15657] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.211613][T15657] vhci_hcd vhci_hcd.0: Device attached [ 335.228668][T15657] siw: device registration error -23 [ 335.403838][ T7647] vhci_hcd: vhci_device speed not set [ 335.433134][T15660] vhci_hcd: connection closed [ 335.485741][ T12] vhci_hcd: stop threads [ 335.494796][ T12] vhci_hcd: release socket [ 335.499325][ T12] vhci_hcd: disconnect device [ 335.517368][ T7647] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 335.525093][ T7647] usb 7-1: enqueue for inactive port 0 [ 335.530600][ T7647] usb 7-1: enqueue for inactive port 0 [ 335.538643][ T7647] usb 7-1: enqueue for inactive port 0 [ 335.616480][ T7647] vhci_hcd: vhci_device speed not set [ 336.053713][T15693] SELinux: security_context_str_to_sid (sgco?%q<^͞:6` 6'ʢc]YI:/qYbX늈?:VjMUO@E%**헿2* ) failed with errno=-22 [ 336.188789][T15695] loop3: detected capacity change from 0 to 512 [ 336.249404][T15695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.389152][T15695] EXT4-fs (loop3): 1 truncate cleaned up [ 336.408692][T15695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.474559][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.622846][T15720] __nla_validate_parse: 5 callbacks suppressed [ 336.622869][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3748'. [ 336.638372][T15713] loop3: detected capacity change from 0 to 2048 [ 336.687268][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3748'. [ 336.696340][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3748'. [ 336.748111][T15713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.783110][T15713] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.3743: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 337.479670][T15745] bond0: (slave veth0_to_hsr): Releasing backup interface [ 337.517853][T15745] bond0: (slave vxlan1): Releasing backup interface [ 337.527110][T15761] sctp: [Deprecated]: syz.5.3762 (pid 15761) Use of int in max_burst socket option. [ 337.527110][T15761] Use struct sctp_assoc_value instead [ 337.553574][T15745] vxlan1: left allmulticast mode [ 337.568892][T15745] bond5: (slave geneve2): Releasing active interface [ 337.577166][T15745] bond5: (slave geneve2): the permanent HWaddr of slave - 7a:ea:fa:63:a3:52 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 337.676117][T15745] geneve2: left allmulticast mode [ 337.704282][T15745] bond5: (slave veth11): Releasing active interface [ 338.154112][T15784] netlink: 'syz.1.3770': attribute type 4 has an invalid length. [ 338.493769][T15797] 9pnet_fd: Insufficient options for proto=fd [ 338.736028][T15810] lo speed is unknown, defaulting to 1000 [ 338.837014][T15823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15823 comm=syz.5.3782 [ 338.861106][T15823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15823 comm=syz.5.3782 [ 338.900467][T15705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 339.262623][T15846] futex_wake_op: syz.3.3789 tries to shift op by -1; fix this program [ 339.450131][T15852] netlink: 'syz.3.3794': attribute type 10 has an invalid length. [ 339.602540][T15859] program syz.3.3796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.826284][T15869] 9pnet_fd: Insufficient options for proto=fd [ 339.937247][T15873] bridge4: entered promiscuous mode [ 339.942540][T15873] bridge4: entered allmulticast mode [ 340.083182][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 340.083201][ T29] audit: type=1326 audit(23345874.671:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.134702][ T29] audit: type=1326 audit(23345874.680:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.158334][ T29] audit: type=1326 audit(23345874.680:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.181871][ T29] audit: type=1326 audit(23345874.680:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.205301][ T29] audit: type=1326 audit(23345874.680:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.228757][ T29] audit: type=1326 audit(23345874.680:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.252226][ T29] audit: type=1326 audit(23345874.699:22602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.275663][ T29] audit: type=1326 audit(23345874.699:22603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.299129][ T29] audit: type=1326 audit(23345874.699:22604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.322627][ T29] audit: type=1326 audit(23345874.699:22605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb75437e969 code=0x7ffc0000 [ 340.569782][T15908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3816'. [ 340.618223][T15914] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3817'. [ 340.699423][T15914] netlink: 'syz.6.3817': attribute type 10 has an invalid length. [ 340.776717][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3821'. [ 340.912509][T15931] lo speed is unknown, defaulting to 1000 [ 341.046242][T15937] binfmt_misc: register: failed to install interpreter file ./file2 [ 341.434614][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'. [ 341.461855][T15957] futex_wake_op: syz.1.3834 tries to shift op by -1; fix this program [ 341.803099][T15981] netlink: 'syz.0.3845': attribute type 13 has an invalid length. [ 341.841686][T15981] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.850235][T15981] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.858650][T15981] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.867213][T15981] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.933289][T15992] futex_wake_op: syz.6.3846 tries to shift op by -1; fix this program [ 341.947593][T15981] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.956177][T15981] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.964690][T15981] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.973282][T15981] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 342.423513][T16002] xt_CT: No such helper "snmp_trap" [ 342.778698][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 343.185945][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 343.430462][T16040] lo speed is unknown, defaulting to 1000 [ 343.754775][T16044] sctp: [Deprecated]: syz.1.3868 (pid 16044) Use of int in max_burst socket option. [ 343.754775][T16044] Use struct sctp_assoc_value instead [ 344.165463][T16059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=16059 comm=syz.3.3866 [ 344.213025][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3865'. [ 344.320368][T16067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3867'. [ 344.372297][T16069] netlink: 'syz.6.3864': attribute type 7 has an invalid length. [ 344.466440][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3870'. [ 344.559265][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'. [ 344.630272][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 344.711265][T16090] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3874'. [ 344.785664][T16090] netlink: 'syz.1.3874': attribute type 10 has an invalid length. [ 344.818817][T16090] hsr_slave_1: left promiscuous mode [ 344.899693][T16102] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 345.151825][T16116] xt_hashlimit: size too large, truncated to 1048576 [ 345.253466][T16117] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 345.999374][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3887'. [ 346.026034][T16127] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 346.039345][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3887'. [ 346.049758][T16127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.073154][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 346.073168][ T29] audit: type=1326 audit(23345880.274:22951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 346.238075][ T29] audit: type=1326 audit(23345880.312:22952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.261858][ T29] audit: type=1326 audit(23345880.312:22953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.285533][ T29] audit: type=1326 audit(23345880.312:22954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.297802][T16136] futex_wake_op: syz.6.3889 tries to shift op by -1; fix this program [ 346.309087][ T29] audit: type=1326 audit(23345880.312:22955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.340787][ T29] audit: type=1326 audit(23345880.312:22956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.364357][ T29] audit: type=1326 audit(23345880.312:22957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.387816][ T29] audit: type=1326 audit(23345880.312:22958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.411234][ T29] audit: type=1326 audit(23345880.312:22959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.434749][ T29] audit: type=1326 audit(23345880.312:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f40c71ae969 code=0x7ffc0000 [ 346.461850][T16139] syz_tun: entered allmulticast mode [ 346.472694][T16139] dvmrp1: entered allmulticast mode [ 346.480856][T16137] syz_tun: left allmulticast mode [ 346.485991][T16137] dvmrp1: left allmulticast mode [ 346.579045][T16149] lo speed is unknown, defaulting to 1000 [ 346.760390][T16159] 9pnet_fd: Insufficient options for proto=fd [ 346.976065][T16173] xt_hashlimit: max too large, truncated to 1048576 [ 347.024036][T16164] macvlan0: entered promiscuous mode [ 347.029395][T16164] bond0: entered promiscuous mode [ 347.036999][T16164] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 347.164815][T16193] 9pnet_fd: Insufficient options for proto=fd [ 347.417387][T16212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16212 comm=syz.3.3917 [ 348.189095][T16237] __nla_validate_parse: 23 callbacks suppressed [ 348.189132][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 348.206163][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 348.273985][T16251] lo speed is unknown, defaulting to 1000 [ 348.856466][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 349.100112][T16265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3926'. [ 349.109317][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3926'. [ 349.118283][T16265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3926'. [ 349.151725][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'. [ 349.160889][T16265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3926'. [ 349.166021][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'. [ 349.261620][T16271] : renamed from bond0 [ 349.458908][T16278] xt_policy: output policy not valid in PREROUTING and INPUT [ 349.659507][T16260] sit0: entered allmulticast mode [ 350.225683][T16292] lo speed is unknown, defaulting to 1000 [ 350.279861][T16299] netlink: 'wޣ': attribute type 10 has an invalid length. [ 350.287435][T16299] netlink: 'wޣ': attribute type 19 has an invalid length. [ 350.294999][T16299] netlink: 156 bytes leftover after parsing attributes in process `wޣ'. [ 350.613018][T16306] lo speed is unknown, defaulting to 1000 [ 350.715602][T16309] syz_tun (unregistering): left promiscuous mode [ 351.293527][T16312] macvlan0: entered promiscuous mode [ 351.298972][T16312] bond0: entered promiscuous mode [ 351.304832][T16312] geneve1: entered promiscuous mode [ 351.324795][T16312] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 351.759139][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 351.759213][ T29] audit: type=1400 audit(23345885.587:23633): avc: denied { write } for pid=16343 comm="syz.3.3954" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.844317][ T29] audit: type=1400 audit(23345885.597:23634): avc: denied { ioctl } for pid=16343 comm="syz.3.3954" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.870861][ T29] audit: type=1326 audit(23345885.653:23635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.6.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e3dce969 code=0x7fc00000 [ 351.929310][T16349] bridge0: port 1(macsec0) entered blocking state [ 351.935847][T16349] bridge0: port 1(macsec0) entered disabled state [ 351.953456][T16349] macsec0: entered allmulticast mode [ 351.958841][T16349] bridge0: entered allmulticast mode [ 351.970522][T16349] macsec0: left allmulticast mode [ 351.975645][T16349] bridge0: left allmulticast mode [ 351.982429][ T29] audit: type=1326 audit(23345885.793:23636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16348 comm="syz.3.3956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a58a1e969 code=0x0 [ 352.262275][T16355] Cannot find set identified by id 0 to match [ 352.283496][ T29] audit: type=1326 audit(23345886.074:23637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.307740][ T29] audit: type=1326 audit(23345886.074:23638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.331304][ T29] audit: type=1326 audit(23345886.074:23639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.355440][ T29] audit: type=1326 audit(23345886.074:23640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.379894][ T29] audit: type=1326 audit(23345886.074:23641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.403738][ T29] audit: type=1326 audit(23345886.074:23642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75437e969 code=0x7fc00000 [ 352.434700][T16358] netlink: 'syz.1.3957': attribute type 1 has an invalid length. [ 352.756225][T16371] futex_wake_op: syz.3.3964 tries to shift op by -1; fix this program [ 353.292369][T16385] netlink: 'syz.1.3968': attribute type 13 has an invalid length. [ 353.306800][T16385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.547340][T16403] futex_wake_op: syz.1.3975 tries to shift op by -1; fix this program [ 353.654922][T16409] __nla_validate_parse: 6 callbacks suppressed [ 353.654939][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3978'. [ 353.715840][T16375] syz.0.3963 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 353.726631][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.0.3963 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 353.726659][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.726672][T16375] Call Trace: [ 353.726678][T16375] [ 353.726686][T16375] __dump_stack+0x1d/0x30 [ 353.726743][T16375] dump_stack_lvl+0xe8/0x140 [ 353.726763][T16375] dump_stack+0x15/0x1b [ 353.726779][T16375] dump_header+0x81/0x220 [ 353.726814][T16375] oom_kill_process+0x334/0x3f0 [ 353.726884][T16375] out_of_memory+0x979/0xb80 [ 353.726909][T16375] ? css_next_descendant_pre+0x138/0x160 [ 353.726932][T16375] mem_cgroup_out_of_memory+0x13d/0x190 [ 353.727018][T16375] try_charge_memcg+0x5e2/0x870 [ 353.727059][T16375] charge_memcg+0x51/0xc0 [ 353.727084][T16375] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 353.727150][T16375] __read_swap_cache_async+0x1df/0x350 [ 353.727191][T16375] swap_cluster_readahead+0x277/0x3e0 [ 353.727287][T16375] swapin_readahead+0xde/0x6f0 [ 353.727311][T16375] ? __filemap_get_folio+0x49f/0x650 [ 353.727339][T16375] ? __rcu_read_unlock+0x34/0x70 [ 353.727362][T16375] ? swap_cache_get_folio+0x77/0x200 [ 353.727427][T16375] do_swap_page+0x301/0x2460 [ 353.727456][T16375] ? cgroup_rstat_updated+0xa3/0x510 [ 353.727485][T16375] ? perf_trace_memcg_rstat_events+0x7c/0x1d0 [ 353.727565][T16375] ? __pfx_default_wake_function+0x10/0x10 [ 353.727612][T16375] handle_mm_fault+0xb60/0x2ae0 [ 353.727685][T16375] ? mas_walk+0xf2/0x120 [ 353.727713][T16375] do_user_addr_fault+0x636/0x1090 [ 353.727795][T16375] ? fpregs_restore_userregs+0x7d/0x190 [ 353.727826][T16375] exc_page_fault+0x54/0xc0 [ 353.727847][T16375] asm_exc_page_fault+0x26/0x30 [ 353.727888][T16375] RIP: 0033:0x7f40c70853ac [ 353.727904][T16375] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 353.727921][T16375] RSP: 002b:00007ffccf8b17f0 EFLAGS: 00010283 [ 353.727937][T16375] RAX: 0000000000000000 RBX: 00007f40c73d6080 RCX: 0000000000000000 [ 353.727949][T16375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555566e90808 [ 353.727960][T16375] RBP: 00007f40c73d7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 353.727972][T16375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000052266 [ 353.727983][T16375] R13: 00007ffccf8b18e0 R14: ffffffffffffffff R15: 00007ffccf8b1900 [ 353.728049][T16375] [ 353.728056][T16375] memory: usage 307200kB, limit 307200kB, failcnt 1607 [ 353.979353][T16375] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 353.987367][T16375] kmem: usage 239792kB, limit 9007199254740988kB, failcnt 0 [ 353.995583][T16375] Memory cgroup stats for /syz0: [ 354.002936][T16375] cache 69025792 [ 354.011682][T16375] rss 0 [ 354.014525][T16375] shmem 0 [ 354.017606][T16375] mapped_file 0 [ 354.021106][T16375] dirty 0 [ 354.024058][T16375] writeback 0 [ 354.028184][T16375] workingset_refault_anon 4578 [ 354.032972][T16375] workingset_refault_file 625 [ 354.037831][T16375] swap 765952 [ 354.041129][T16375] swapcached 0 [ 354.044591][T16375] pgpgin 638113 [ 354.048169][T16375] pgpgout 621261 [ 354.051756][T16375] pgfault 494206 [ 354.055394][T16375] pgmajfault 649 [ 354.059606][T16375] inactive_anon 0 [ 354.063250][T16375] active_anon 0 [ 354.066722][T16375] inactive_file 0 [ 354.070403][T16375] active_file 0 [ 354.073881][T16375] unevictable 69025792 [ 354.077998][T16375] hierarchical_memory_limit 314572800 [ 354.083411][T16375] hierarchical_memsw_limit 9223372036854771712 [ 354.090321][T16375] total_cache 69025792 [ 354.094408][T16375] total_rss 0 [ 354.097703][T16375] total_shmem 0 [ 354.101205][T16375] total_mapped_file 0 [ 354.105266][T16375] total_dirty 0 [ 354.108765][T16375] total_writeback 0 [ 354.112634][T16375] total_workingset_refault_anon 4578 [ 354.117924][T16375] total_workingset_refault_file 625 [ 354.123728][T16375] total_swap 765952 [ 354.127544][T16375] total_swapcached 0 [ 354.131493][T16375] total_pgpgin 638113 [ 354.135557][T16375] total_pgpgout 621261 [ 354.139656][T16375] total_pgfault 494206 [ 354.143818][T16375] total_pgmajfault 649 [ 354.147984][T16375] total_inactive_anon 0 [ 354.152155][T16375] total_active_anon 0 [ 354.156890][T16375] total_inactive_file 0 [ 354.161064][T16375] total_active_file 0 [ 354.165175][T16375] total_unevictable 69025792 [ 354.169775][T16375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3963,pid=16375,uid=0 [ 354.184729][T16375] Memory cgroup out of memory: Killed process 16375 (syz.0.3963) total-vm:93748kB, anon-rss:936kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 354.410203][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3984'. [ 354.419710][T16431] vcan0: entered promiscuous mode [ 354.424867][T16431] vcan0: entered allmulticast mode [ 354.452918][T16432] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.686412][T16444] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 354.710861][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.719799][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.743184][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.772966][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.781958][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.792011][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.823858][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.832896][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 354.938063][T16444] netlink: 'syz.5.3990': attribute type 3 has an invalid length. [ 355.108796][T16454] 9pnet_fd: Insufficient options for proto=fd [ 355.172734][T16473] IPVS: Error connecting to the multicast addr [ 355.290489][T16478] geneve0: entered allmulticast mode [ 355.376881][T16491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.396662][T16491] bond2 (unregistering): Released all slaves [ 355.510424][T16504] lo speed is unknown, defaulting to 1000 [ 356.382457][T16515] lo speed is unknown, defaulting to 1000 [ 357.025205][T16544] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 357.225958][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 357.225973][ T29] audit: type=1326 audit(23345890.704:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.294346][ T29] audit: type=1326 audit(23345890.741:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.310361][T16550] wg2: entered promiscuous mode [ 357.317850][ T29] audit: type=1326 audit(23345890.741:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.346953][ T29] audit: type=1326 audit(23345890.741:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.371068][ T29] audit: type=1326 audit(23345890.741:23932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.396375][ T29] audit: type=1326 audit(23345890.741:23933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.419975][ T29] audit: type=1326 audit(23345890.741:23934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.444190][ T29] audit: type=1326 audit(23345890.751:23935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.467846][ T29] audit: type=1326 audit(23345890.751:23936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.492167][ T29] audit: type=1326 audit(23345890.751:23937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.1.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc405b0e969 code=0x7ffc0000 [ 357.649220][T16568] lo speed is unknown, defaulting to 1000 [ 357.755479][T16574] netlink: 'syz.1.4026': attribute type 27 has an invalid length. [ 357.769493][T16574] 0XD: left allmulticast mode [ 357.786624][T16574] wg2: left promiscuous mode [ 357.793679][T16574] veth11: left promiscuous mode [ 357.798695][T16574] bond4: left promiscuous mode [ 357.803610][T16574] bond4: left allmulticast mode [ 357.808672][T16574] vxlan0: left promiscuous mode [ 357.814635][T16574] gtp0: left allmulticast mode [ 358.670854][T16591] lo speed is unknown, defaulting to 1000 [ 358.778137][T16596] lo speed is unknown, defaulting to 1000 [ 359.260838][T16621] lo speed is unknown, defaulting to 1000 [ 359.278066][T16616] lo speed is unknown, defaulting to 1000 [ 359.420111][T16629] netlink: 'syz.1.4042': attribute type 10 has an invalid length. [ 359.429225][T16629] __nla_validate_parse: 7 callbacks suppressed [ 359.429315][T16629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4042'. [ 359.828843][T16646] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4048'. [ 359.879069][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 360.018701][T16652] lo speed is unknown, defaulting to 1000 [ 360.050619][T16654] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 360.368705][T16662] vlan1: entered allmulticast mode [ 360.373896][T16662] $H: entered allmulticast mode [ 361.592975][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4060'. [ 361.644351][T16684] futex_wake_op: syz.3.4061 tries to shift op by -1; fix this program [ 361.653400][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 362.130387][T16698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16698 comm=syz.3.4065 [ 362.254550][T16700] netlink: 'syz.0.4067': attribute type 10 has an invalid length. [ 362.268344][T16700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4067'. [ 362.614666][T16712] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 362.841258][T16713] netlink: 'syz.0.4069': attribute type 3 has an invalid length. [ 362.912080][T16715] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 364.153944][T16732] vlan0: entered allmulticast mode [ 364.159126][T16732] $H: entered allmulticast mode [ 364.262213][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 364.262227][ T29] audit: type=1400 audit(23345897.289:24233): avc: denied { listen } for pid=16734 comm="syz.5.4077" path=2F3730352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 364.312804][T16735] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4077'. [ 364.475611][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4076'. [ 364.556580][T16735] team0: Mode "" not found [ 364.583294][T16739] vhci_hcd: invalid port number 96 [ 364.589203][T16739] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 364.597485][ T29] audit: type=1400 audit(23345897.588:24234): avc: denied { map } for pid=16738 comm="syz.3.4076" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 364.732166][T16749] futex_wake_op: syz.6.4080 tries to shift op by -1; fix this program [ 364.875381][T16758] program syz.3.4084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.889760][T16755] lo speed is unknown, defaulting to 1000 [ 364.913927][T16750] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 364.930145][ T29] audit: type=1400 audit(23345897.906:24235): avc: denied { relabelto } for pid=16747 comm="syz.5.4081" name="file1" dev="tmpfs" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 365.070448][ T29] audit: type=1400 audit(23345897.916:24236): avc: denied { associate } for pid=16747 comm="syz.5.4081" name="file1" dev="tmpfs" ino=3786 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 365.099574][ T29] audit: type=1326 audit(23345897.944:24237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.123768][ T29] audit: type=1326 audit(23345897.944:24238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.147252][ T29] audit: type=1326 audit(23345897.953:24239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.171676][ T29] audit: type=1326 audit(23345897.953:24240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.195213][ T29] audit: type=1326 audit(23345897.953:24241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.219517][ T29] audit: type=1326 audit(23345897.953:24242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.3.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f9a58a1e969 code=0x7ffc0000 [ 365.296571][T16765] lo speed is unknown, defaulting to 1000 [ 365.640329][T16773] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 365.773536][T16786] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 365.843693][T16786] bond0: entered promiscuous mode [ 365.848225][T16793] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4090'. [ 365.858978][T16776] ================================================================== [ 365.867092][T16776] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 365.873582][T16776] [ 365.876015][T16776] write to 0xffffc90001393bd0 of 4 bytes by interrupt on cpu 1: [ 365.883664][T16776] pollwake+0xb6/0x100 [ 365.887769][T16776] __wake_up+0x63/0xb0 [ 365.891904][T16776] bpf_ringbuf_notify+0x22/0x30 [ 365.896806][T16776] irq_work_run+0xdf/0x2d0 [ 365.901269][T16776] __sysvec_irq_work+0x22/0x170 [ 365.901379][T16786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.906143][T16776] sysvec_irq_work+0x66/0x80 [ 365.906181][T16776] asm_sysvec_irq_work+0x1a/0x20 [ 365.906204][T16776] native_apic_msr_write+0x3d/0x60 [ 365.927462][T16776] x2apic_send_IPI_self+0x10/0x20 [ 365.932514][T16776] arch_irq_work_raise+0x46/0x50 [ 365.937474][T16776] __irq_work_queue_local+0x80/0x1b0 [ 365.942780][T16776] irq_work_queue+0x70/0x100 [ 365.947385][T16776] bpf_ringbuf_discard+0xd3/0xf0 [ 365.952344][T16776] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 365.957813][T16776] bpf_trace_run3+0x196/0x1d0 [ 365.962510][T16776] __traceiter_kmem_cache_free+0x38/0x60 [ 365.968161][T16776] kmem_cache_free+0x246/0x2f0 [ 365.972943][T16776] kernfs_free_rcu+0x97/0xb0 [ 365.977549][T16776] rcu_core+0x59f/0xc00 [ 365.981718][T16776] rcu_core_si+0xd/0x20 [ 365.985884][T16776] handle_softirqs+0xb7/0x290 [ 365.990572][T16776] run_ksoftirqd+0x1c/0x30 [ 365.995007][T16776] smpboot_thread_fn+0x32b/0x530 [ 365.999962][T16776] kthread+0x489/0x510 [ 366.004037][T16776] ret_from_fork+0x4b/0x60 [ 366.008459][T16776] ret_from_fork_asm+0x1a/0x30 [ 366.013232][T16776] [ 366.015561][T16776] read to 0xffffc90001393bd0 of 4 bytes by task 16776 on cpu 0: [ 366.023201][T16776] do_sys_poll+0x97b/0xbc0 [ 366.027639][T16776] __se_sys_ppoll+0x1b9/0x200 [ 366.032333][T16776] __x64_sys_ppoll+0x67/0x80 [ 366.036942][T16776] x64_sys_call+0x2de5/0x2fb0 [ 366.041636][T16776] do_syscall_64+0xd0/0x1a0 [ 366.046157][T16776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.052063][T16776] [ 366.054387][T16776] value changed: 0x00000000 -> 0x00000001 [ 366.060105][T16776] [ 366.062428][T16776] Reported by Kernel Concurrency Sanitizer on: [ 366.068577][T16776] CPU: 0 UID: 0 PID: 16776 Comm: syz.0.4088 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 366.081098][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 366.091259][T16776] ================================================================== [ 366.111356][T16793] batadv2: entered promiscuous mode [ 366.116746][T16793] batadv2: entered allmulticast mode [ 366.124032][T16793] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 366.133576][T16793] bond0: (slave batadv2): making interface the new active one [ 366.142687][T16793] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 366.151615][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4092'. [ 366.161390][T16792] netlink: 'syz.6.4092': attribute type 30 has an invalid length. [ 366.173014][T16792] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.181281][T16792] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.189466][T16792] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.197676][T16792] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.210282][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4092'. [ 366.213719][T16795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.219583][T16792] netlink: 'syz.6.4092': attribute type 30 has an invalid length.