last executing test programs: 9m25.131761206s ago: executing program 32 (id=370): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 8m35.572987374s ago: executing program 33 (id=1998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x38, 0x14, 0xa09, 0x0, 0x0, {0x2, 0x1f, 0x48, 0xff, r3}, [@IFA_FLAGS={0x8, 0x8, 0x8e}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8m9.674058695s ago: executing program 34 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 8m2.053768903s ago: executing program 35 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001"], 0x118}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) 6m50.137878648s ago: executing program 36 (id=5715): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0xc, 0x3}) 6m13.489613785s ago: executing program 37 (id=6723): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r1, &(0x7f0000000080)=""/203, 0xcb) getdents(r1, 0x0, 0x58) 4m45.058669205s ago: executing program 38 (id=9483): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f8ac436566e45f3a69f6b7d5739c2b4e65d239f1b3e6574a69727f656bb74aa4c21b92f691062e353577c81f2f8bdf3377968a5be229c11c10881b2140653866e286da5b6325312169df505aed9d4aea12476ac13e7d1310ff6ece45a7aa2d40e176f8dfa7ed208b024cb5e800edb01c2290176987b042a0b116b8bffb7c706246348b8c701bccfd81dff0692a9e7dbc1e850e0366c8881af401e15d9fbcb48c9cc3eb3ae6ab42c2045f303e921bc5c03a03641d52376a740e3e5ddc3d8221d99c81bd13b574b42c9921996af1a6c5b662adb856b61086e13dfa916ed52254045ed4fa", @ANYRESHEX=r1, @ANYBLOB=',una']) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x12, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4m38.94138006s ago: executing program 39 (id=9717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 4m31.362284208s ago: executing program 40 (id=9949): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x2, 0x0, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x141435, 0xffefffff, 0x4, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x6}) 4m15.183566258s ago: executing program 41 (id=10498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000007c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\b\x00\x00\x00\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x81\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xf9\x17\x0f\x14\xbbr9\'\x92\xa5\x7f\x9ac\x0f\x10/\x93s\xac\x0e\x0e\xcb\x89\xcb+\xc3\xd1\xb16\x86\xef\x7fA\xec8\xc6M\xbe\x91\x8a]\xae\xeb\x93`\xc2\x8b.s\x1f\xe1\xe143\xea\x89\xa7fs\x0eu\xb8\x1d/d\x1fd?\xe8\xa4#\xf6H\xa0iY\x04\xe2\xbd\x8b\xbb~\xe7\xcf\xae^\x02\x04\xcdoQ:\x11', 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 3m54.822411574s ago: executing program 42 (id=11152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x5, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 3m52.028076847s ago: executing program 43 (id=11216): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x0, 0xf5}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 3m45.37756711s ago: executing program 44 (id=11399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x2000000, 0x1, 0x1, r2}}, 0x40) 3m33.414578646s ago: executing program 45 (id=11726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 3m28.734842358s ago: executing program 46 (id=11874): pause() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) futex_waitv(&(0x7f0000002340)=[{0x7, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0x5cb5fafb, 0x0, 0x2}, {0xd0, 0x0, 0x2}, {0x2528, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0xff, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x3, &(0x7f0000000700)=0x9, 0x82}, {0x6, 0x0, 0x1f7e2bbf99c3da4a}, {0xffff, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x80000001, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7fff, &(0x7f0000000a40)=0xa, 0x82}, {0x401, &(0x7f0000000a80)=0x4, 0x82}, {0x9, &(0x7f0000000ac0)=0xfffffffffffffff8, 0x82}, {0x1, 0x0, 0x2}, {0x380000000, 0x0, 0x82}, {0x4b70a6ee, &(0x7f0000000b80)=0x10000, 0x82}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x461, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x7fffffff0000, 0x0, 0x80}, {0xb2b, 0x0, 0x82}, {0x2, &(0x7f0000000e40)=0x5, 0x82}, {0x5, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3d0000, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7c3, 0x0, 0x80}, {0x400, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x34, 0x0, 0x0, 0x0) 2m51.972021488s ago: executing program 47 (id=13171): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2m46.558587721s ago: executing program 48 (id=13346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000380)={0x2a, 0xffffffff00000002, 0x7ffe}, 0xc) bind$qrtr(r2, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) 2m5.586399967s ago: executing program 49 (id=14754): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="6e8000"/20, 0x14}, {&(0x7f0000000340)="b9d7d7057f0e84f0d7824db14f0f7ca046a0dff9dc46e7af27877ba9b8aae9e70e854f10", 0x24}], 0x2, 0x9) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 2m5.548782138s ago: executing program 50 (id=14756): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x4000, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1) 2m5.516219638s ago: executing program 51 (id=14757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1m54.666340537s ago: executing program 52 (id=14981): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000003c0), &(0x7f0000000600)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m47.628514662s ago: executing program 53 (id=15235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc004814) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1m24.729457309s ago: executing program 6 (id=15871): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) 1m24.728572159s ago: executing program 9 (id=15874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) close(r2) 1m24.728293839s ago: executing program 6 (id=15875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 1m24.66822675s ago: executing program 6 (id=15877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d000000140003800400050004000400080002000000000055121c79a45be71e76c8d6c3d001416cb8738bdc7e4abfb5d08d6bd34fafadea1fb06b5252a6e41f7179f9b730b61ef626a5da8a89f8315d97f54f6c81e482a6086ec8c60a57a76136f48737c3df7d0f62eeed6e"], 0x48}}, 0x0) 1m24.65257897s ago: executing program 6 (id=15878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 1m24.588914541s ago: executing program 9 (id=15881): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 1m24.588205891s ago: executing program 2 (id=15883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 1m24.561578971s ago: executing program 9 (id=15884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 1m24.502508642s ago: executing program 2 (id=15887): r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m24.502249422s ago: executing program 9 (id=15888): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m24.488886612s ago: executing program 2 (id=15890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r2}, 0xc) 1m24.434256353s ago: executing program 9 (id=15892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0xca9a3b00000000, 0x0, 0x1) 1m24.417472024s ago: executing program 2 (id=15895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1m24.298290266s ago: executing program 2 (id=15897): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0xd5f1, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m24.297828126s ago: executing program 6 (id=15906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0xffffffffffffff64, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) 1m24.175602888s ago: executing program 54 (id=15898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd020303004d000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 1m24.173244648s ago: executing program 6 (id=15900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 1m24.159576128s ago: executing program 55 (id=15900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 1m24.04809272s ago: executing program 2 (id=15902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m24.04794183s ago: executing program 56 (id=15902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m23.38903343s ago: executing program 9 (id=15904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d0da1ad0000000000001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 1m23.388809571s ago: executing program 57 (id=15904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d0da1ad0000000000001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 1m9.586265087s ago: executing program 5 (id=16282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) 1m9.514489008s ago: executing program 5 (id=16283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 1m9.514199578s ago: executing program 5 (id=16284): memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m9.513988178s ago: executing program 5 (id=16285): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.082459325s ago: executing program 5 (id=16291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x4db, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) 1m8.80349513s ago: executing program 5 (id=16294): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 1m8.745985421s ago: executing program 58 (id=16294): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 1m4.502585931s ago: executing program 3 (id=16376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000016c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='a 7'], 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\tr'], 0xa) 1m4.472541531s ago: executing program 3 (id=16377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000004000000000100000004000180100002800c0001800800010003"], 0x28}}, 0x0) 1m4.457393531s ago: executing program 3 (id=16378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1m4.372821933s ago: executing program 3 (id=16383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m4.352119364s ago: executing program 3 (id=16385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 1m3.986548009s ago: executing program 3 (id=16396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 1m3.986410559s ago: executing program 59 (id=16396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 3.385495755s ago: executing program 7 (id=18084): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 2.379010241s ago: executing program 7 (id=18103): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) unshare(0x28000600) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvTLtFBGxF/MEPtYrGxh8tBVQOHtBo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1sztDd5fdpV12u9X9fJKB92be9L3vvnnbN/N2G8DQmsz+SSK2R8QfETFeyzYWmKz9d+Pahfmb1y7MJ1GpvPN3Ui13/dqF+aJocd62PDOVRqSfJ7G3Rb3L586fmiuXF8/m+ZmV0x/OLJ87/8LJ03MnFk8snjl45MjhQ7Mvv3TwxZ7EmbXp+p5PlvbtfvP9r9869mVD/E1x9Mhkp4NPVyo9rm6wdtSlk9EBNoR1GYmIrLtK1fE/HiOx2nnj8cZnA20c0FeVSqWyrf3hixXgfyyJxrwhD8Oi+EWf3f8WW/Mk4Gj/ph8Dd/XV2g1QFveNfKsdGY00L1Nqur/tpcmIeO/iP99mW/TnOQQAQIMfs/nP863mf2k8VFfuvnxtaCIi7o+InRHxQETsiogHI6plH46IR9ZZf/Miye3zn/RKV4GtUTb/eyVf22qc/xWzv5gYyXM7qvGXkuMny4sH8tdkKkpbsvxshzp+ev33r9odq5//ZVtWfzEXzNtxZXRL4zkLcytzdxNzvauXIvaMtoo/ubUSkETE7ojY02UdJ5/9fl+7Y3eOv4MerDNVvot4ptb/F6Mp/kLSeX1y5p4oLx6YKa6K2/362+W329V/V/H3QNb/97a8/m/FP5HUr9cur7+Oy39+0faeptvrfyx5t5oey/d9PLeycnY2Yiw5Vmt0/f6Dq+cW+aJ8Fv/U/tbjf2esvhJ7IyK7iB+NiMci4vG87U9ExJMRsb9D/L+89tQH3cffX1n8C6v9f/TO/b+aGIvmPa0TI6d+/qGh0onb4r/Zuf8PV1NT+Z61vP+tpV3dXc0AAADw35NGxPZI0ulb6TSdnq59Xn5XRFpeWl557vjSR2cWat8RmIhIiydd43XPQ2fz2/pa/lJE1D5aUBw/lD83/mZkazU/Pb9UXhh08DDktrUZ/5m/RgbdOqDvfF8LhpfxD8PL+IfhZfzD8Gox/rcOoh3Axmv1+//TAbQD2HhN49+yHwwR9/8wvIx/GF7GPwyl5a1x5y/Jd0wUP6nL0wecKN76ev+To7Sus7ZshldjXf2ebopmbNpEaROOi+JvGq2l8Ma/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTDvwEAAP//7hXV/g==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) 1.981793358s ago: executing program 7 (id=18105): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000500)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1}, 0x18) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.782635471s ago: executing program 7 (id=18108): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 1.115337302s ago: executing program 8 (id=18132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="0e9a1854e84d5ce3ad0d80fd4c1e20727a232015ca4695d330aa9c9200ba6a51d8b717dc3d730008c686e3efb1f97e31570600000000000000d28a6f503e616687277627296fc3e47342f343eb4d3501368f79820c153ea6361c6f0f896dbc760a44e26126af33beae24bef31b506184a8d0f531dc85c1a758eece323559c55333e94185cd133e99cb2b48032ee2f1e785a27a7a23fd5e3990fac2cfa6a3d4ef8dce92926e85cfa92abac046e8da6110b266e65c48d712100b674ef00897ef3568ebd71210e0d36f3bccc0600186618e6fb8de48", @ANYRES8=r0, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRESHEX=r1], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$selinux_create(r2, &(0x7f00000003c0)=@access={'system_u:object_r:system_cron_spool_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xeb}, 0x4d) fdatasync(r2) 1.010907534s ago: executing program 1 (id=18135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 986.443154ms ago: executing program 8 (id=18137): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x0, 0x573, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x21a509d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 986.193174ms ago: executing program 7 (id=18138): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 941.726185ms ago: executing program 8 (id=18140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 884.461206ms ago: executing program 8 (id=18142): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x100000001}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 851.896286ms ago: executing program 8 (id=18144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) 819.236527ms ago: executing program 1 (id=18145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 715.491659ms ago: executing program 1 (id=18149): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xffff, 0x8009) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) write$cgroup_int(r2, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x18, 0x0, 0x0, 0xffffffffffff8001}) 673.102189ms ago: executing program 1 (id=18151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x158}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 642.15416ms ago: executing program 1 (id=18154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x6c}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 636.00465ms ago: executing program 4 (id=18155): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 611.06827ms ago: executing program 4 (id=18156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 582.116541ms ago: executing program 1 (id=18157): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZzW3r7MZX5/ZJLZ+bc4TzT26fn3NNz5gZQWYPpP7WI/RExnUT0J/OLZZ2RFQ4uPO/Bnx+dTR9J1Ouv/Z5Ekh3Ln59kX/uyk3si4scfktjXsbLemblrF8enpiavZvvDs5emh2fmrh2+cGn8/OT5ycujL4yeOH7s+ImRI21d1/WCY6dvvvt+/ydjb37z1V/JyLe/jCVxMl7Onrj0OjbLYAw2vifJyqK+E5tdWUk6sp+TpS9x0lliQKxL/vp1RcQT0R8d8fDF64+PXyk1OGBL1ZOIOlBRifyHisr7Afl7++Xvg2ul9EqA7XD/1MIAwMr871wYG4yextjA7gdJLB3WSSKivZG5Znsi4u6dsZvn7ozdjC0ahwOKzd+IiCeL8j9p5P9A9MRAI/9rTfmf9gvOZF/T46+2Wf/yoWL5D9tnIf97Vs3/aJH/by3J/7fbrH/w4eY7vU3539vuJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMlNqH9w2f7Kv//X7m1CNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+EavG4i4fyPiqcL5v8li+58UtP/p74PpR6xj37O3zrQqWzv/ga1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63qbzf/3WICNi5t/3evnv8DydL79cysv46jc531VmXt9v+7k9cbt5zpzo59MD47e3Ukojs53ZEebTo+uv6Y4XGU50OeL2n+H3pm9fG/ov5/b0TML/u/kz+a1xTn/v9336+t4tH/h/Kk+T+xrvZ//Rujtwa+b1X/o7X/xxpt/aHsiPE/WPBFnqbdzccL0rGzqGi74wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRljU+/7+Wf9Jv/8J+kn/+/8CS/dFl+0cjYm9EfN7R29gfOntlaqLsiwcAAAAAAAAAAAAAAAAAAIAdoq/F+v/Ubx1lRwdsuc6yAwBKU5D/P5URB7D9tP9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VNc68z/JHgAAAAAAwM6098Dtn5OImH+xt/FIdWdlXaVGBmy1WtkBAKVxix+oLlP/oLrW+x7/5BbFAZRnrfm8PS1P2shM4OmzGzgZAAAAAAAAAAAAACrn4H7r/6GqrP+H6rL+H6orX/9/oOQ4gO3nPT4Qa6zkL1z/v+ZZAAAAAAAAAAAAAMBmmpm7dnF8amryqo03dkYY27lRr9evpz8FOyWef/lGPhV+p8SzbCNf6/doZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//030lBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 296.761185ms ago: executing program 0 (id=18159): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 210.405587ms ago: executing program 0 (id=18160): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 196.716037ms ago: executing program 4 (id=18161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 161.952968ms ago: executing program 7 (id=18162): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) 127.900228ms ago: executing program 0 (id=18163): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) sendfile(r3, r2, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 127.381618ms ago: executing program 4 (id=18164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 78.577619ms ago: executing program 0 (id=18165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 77.483939ms ago: executing program 4 (id=18166): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x5}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000002440)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 62.036979ms ago: executing program 0 (id=18167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 22.38454ms ago: executing program 4 (id=18168): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10.39287ms ago: executing program 8 (id=18169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 0s ago: executing program 0 (id=18170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): ] syzkaller1: entered allmulticast mode [ 540.152469][T31374] netlink: 'syz.1.16039': attribute type 6 has an invalid length. [ 540.219000][T31385] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16044'. [ 540.291501][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 540.300891][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 540.362296][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 540.371698][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 540.464437][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 540.474469][T31394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16048'. [ 541.183127][T31464] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in; [ 541.183127][T31464] program syz.1.16073 not setting count and/or reply_len properly [ 541.414247][T31490] loop5: detected capacity change from 0 to 8192 [ 541.492271][T31507] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 541.540089][T31513] hub 2-0:1.0: USB hub found [ 541.545103][T31513] hub 2-0:1.0: 8 ports detected [ 542.278926][T31587] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 542.278926][T31587] program syz.3.16109 not setting count and/or reply_len properly [ 543.100346][T31663] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 543.351221][T31678] SELinux: failed to load policy [ 543.546733][T31717] all: renamed from lo (while UP) [ 543.613114][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 543.613131][ T29] audit: type=1326 audit(2083.774:16447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31725 comm="syz.3.16161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbc6ee929 code=0x7ffc0000 [ 543.650065][T31728] netlink: zone id is out of range [ 543.662039][T31728] netlink: zone id is out of range [ 543.671558][ T29] audit: type=1326 audit(2083.816:16448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31725 comm="syz.3.16161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f5cbc6ee929 code=0x7ffc0000 [ 543.675294][T31728] netlink: del zone limit has 8 unknown bytes [ 543.695161][ T29] audit: type=1326 audit(2083.816:16449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31725 comm="syz.3.16161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbc6ee929 code=0x7ffc0000 [ 543.695207][ T29] audit: type=1326 audit(2083.827:16450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.695316][ T29] audit: type=1326 audit(2083.827:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.695365][ T29] audit: type=1326 audit(2083.827:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.795966][ T29] audit: type=1326 audit(2083.827:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.819732][ T29] audit: type=1326 audit(2083.827:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.843102][ T29] audit: type=1326 audit(2083.827:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.866604][ T29] audit: type=1326 audit(2083.827:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31729 comm="syz.8.16162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 543.941841][T31742] vlan2: entered allmulticast mode [ 544.201216][T31773] netlink: 'syz.3.16181': attribute type 1 has an invalid length. [ 544.209191][T31773] netlink: 'syz.3.16181': attribute type 2 has an invalid length. [ 544.493319][T31808] loop5: detected capacity change from 0 to 1024 [ 544.500615][T31808] EXT4-fs: Ignoring removed orlov option [ 544.506678][T31808] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 544.529559][T31808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.545856][T31808] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.16198: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 544.570093][T31808] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.16198: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 544.609830][T29506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.816667][T31846] __nla_validate_parse: 9 callbacks suppressed [ 544.816688][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16211'. [ 544.861096][T31846] erspan0: entered promiscuous mode [ 544.866463][T31846] macvtap1: entered promiscuous mode [ 544.872156][T31846] macvtap1: entered allmulticast mode [ 544.877595][T31846] erspan0: entered allmulticast mode [ 544.886391][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16211'. [ 544.928682][T31860] loop5: detected capacity change from 0 to 164 [ 544.947739][T31860] syz.5.16217: attempt to access beyond end of device [ 544.947739][T31860] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 544.964056][T31860] syz.5.16217: attempt to access beyond end of device [ 544.964056][T31860] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 545.057432][T31877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.066510][T31877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.158772][T31890] all: renamed from bridge_slave_0 (while UP) [ 545.407625][T31912] infiniband syz!: set active [ 545.412461][T31912] infiniband syz!: added team_slave_0 [ 545.424986][T31912] RDS/IB: syz!: added [ 545.430769][T31912] smc: adding ib device syz! with port count 1 [ 545.437260][T31912] smc: ib device syz! port 1 has pnetid [ 546.007652][T31954] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16253'. [ 546.035202][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16255'. [ 546.044608][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16255'. [ 546.301904][T31998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16272'. [ 546.366367][T32006] loop5: detected capacity change from 0 to 512 [ 546.383565][T32006] EXT4-fs (loop5): 1 orphan inode deleted [ 546.390580][T32006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.422865][T29506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.506150][T32023] SELinux: ebitmap: truncated map [ 546.512100][T32023] SELinux: failed to load policy [ 546.554747][T32032] ip6gre1: entered allmulticast mode [ 546.639148][T32041] loop5: detected capacity change from 0 to 512 [ 546.724297][T32041] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.16285: Parent and EA inode have the same ino 15 [ 546.785128][T32041] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.16285: Parent and EA inode have the same ino 15 [ 546.805360][T32041] EXT4-fs (loop5): 1 orphan inode deleted [ 546.816141][T32051] netlink: 'syz.4.16289': attribute type 1 has an invalid length. [ 546.816200][T32051] netlink: 'syz.4.16289': attribute type 2 has an invalid length. [ 546.816218][T32051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16289'. [ 546.858447][T32041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.008298][T29506] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 547.029850][T29506] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 547.041685][T29506] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 547.294772][T32056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.771090][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16304'. [ 547.837283][T32139] erspan0: entered promiscuous mode [ 547.871497][T32139] macvtap1: entered promiscuous mode [ 547.877074][T32139] macvtap1: entered allmulticast mode [ 547.882577][T32139] erspan0: entered allmulticast mode [ 547.904346][T32200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16304'. [ 547.946172][T32075] chnl_net:caif_netlink_parms(): no params data found [ 548.136657][T32075] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.143806][T32075] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.160777][T32075] bridge_slave_0: entered allmulticast mode [ 548.173256][T32075] bridge_slave_0: entered promiscuous mode [ 548.187977][T32075] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.195150][T32075] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.210108][T32075] bridge_slave_1: entered allmulticast mode [ 548.242788][T32075] bridge_slave_1: entered promiscuous mode [ 548.263160][T32281] pim6reg1: entered promiscuous mode [ 548.268512][T32281] pim6reg1: entered allmulticast mode [ 548.321872][T32075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.373819][T32075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.501982][T32075] team0: Port device team_slave_0 added [ 548.525873][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 548.525892][ T29] audit: type=1400 audit(2088.945:16586): avc: denied { connect } for pid=32324 comm="syz.1.16319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 548.527359][T32075] team0: Port device team_slave_1 added [ 548.673667][T32075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.680843][T32075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.707253][T32075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.764910][T32350] netlink: 96 bytes leftover after parsing attributes in process `syz.8.16321'. [ 548.775009][T32075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.782063][T32075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.808199][T32075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.966390][T32075] hsr_slave_0: entered promiscuous mode [ 548.988510][T32075] hsr_slave_1: entered promiscuous mode [ 549.014809][T32075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.036332][T32075] Cannot create hsr debugfs directory [ 549.414821][T32495] hub 2-0:1.0: USB hub found [ 549.415155][T32075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 549.427465][T32495] hub 2-0:1.0: 8 ports detected [ 549.429122][T32075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 549.441594][T32075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.453171][T32075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.495747][T32075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.509536][T32075] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.519921][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.527020][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.538486][ T4127] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.545636][ T4127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.557763][ T4078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.611867][ T4078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.647498][T32075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.657888][ T4078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.705570][ T4078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.763065][ T4078] bridge_slave_1: left allmulticast mode [ 549.768782][ T4078] bridge_slave_1: left promiscuous mode [ 549.774700][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.783090][ T4078] bridge_slave_0: left allmulticast mode [ 549.789569][ T4078] bridge_slave_0: left promiscuous mode [ 549.795475][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.822569][T32545] netlink: 'syz.3.16335': attribute type 1 has an invalid length. [ 549.830558][T32545] netlink: 'syz.3.16335': attribute type 2 has an invalid length. [ 549.838934][T32545] __nla_validate_parse: 1 callbacks suppressed [ 549.838953][T32545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16335'. [ 549.905473][ T4078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.916583][ T4078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.926651][ T4078] bond0 (unregistering): Released all slaves [ 549.961682][T32075] veth0_vlan: entered promiscuous mode [ 549.969658][T32075] veth1_vlan: entered promiscuous mode [ 549.986653][T32075] veth0_macvtap: entered promiscuous mode [ 549.994701][T32075] veth1_macvtap: entered promiscuous mode [ 550.008791][T32075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.022113][ T4078] hsr_slave_0: left promiscuous mode [ 550.030382][ T4078] hsr_slave_1: left promiscuous mode [ 550.037620][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.045968][ T4078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.056892][ T29] audit: type=1326 audit(2090.566:16587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32481 comm="syz.1.16332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7fc00000 [ 550.085074][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.092689][ T4078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.106981][ T4078] veth1_macvtap: left promiscuous mode [ 550.115956][ T4078] veth0_macvtap: left promiscuous mode [ 550.121806][ T4078] veth1_vlan: left promiscuous mode [ 550.128739][ T4078] veth0_vlan: left promiscuous mode [ 550.240153][T32560] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 550.365294][ T4078] team0 (unregistering): Port device team_slave_1 removed [ 550.381552][ T4078] team0 (unregistering): Port device team_slave_0 removed [ 550.454566][T32075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.494505][T32075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.503562][T32075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.512460][T32075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.521310][T32075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.133930][T32581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16347'. [ 551.269624][T32605] serio: Serial port ptm0 [ 551.642573][T32670] netlink: 'syz.7.16375': attribute type 1 has an invalid length. [ 551.650532][T32670] netlink: 'syz.7.16375': attribute type 1 has an invalid length. [ 551.689074][T32676] netlink: 'syz.1.16387': attribute type 29 has an invalid length. [ 551.693648][T32675] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 551.725586][T32680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.737055][T32680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.783540][T32692] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 551.815228][ T29] audit: type=1326 audit(2092.409:16588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.16386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 551.839933][ T29] audit: type=1326 audit(2092.409:16589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.16386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 551.863928][ T29] audit: type=1326 audit(2092.409:16590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.16386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 551.887948][ T29] audit: type=1326 audit(2092.409:16591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.16386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 551.911281][ T29] audit: type=1326 audit(2092.441:16592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.16386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 552.053909][T32715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.063598][T32715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.324041][T30127] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 552.341628][T30127] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.452133][T32727] chnl_net:caif_netlink_parms(): no params data found [ 552.579476][T32727] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.586678][T32727] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.599552][T32727] bridge_slave_0: entered allmulticast mode [ 552.606880][T32727] bridge_slave_0: entered promiscuous mode [ 552.616569][T32727] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.623800][T32727] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.643807][T32727] bridge_slave_1: entered allmulticast mode [ 552.647321][ T29] audit: type=1326 audit(2093.283:16593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=447 comm="syz.4.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 552.651776][T32727] bridge_slave_1: entered promiscuous mode [ 552.672858][ T29] audit: type=1326 audit(2093.283:16594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=447 comm="syz.4.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 552.707871][ T29] audit: type=1326 audit(2093.335:16595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=447 comm="syz.4.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 552.763980][T32727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.794181][ T4121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.827834][T32727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.874444][ T4121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.902933][ T509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.929268][T32727] team0: Port device team_slave_0 added [ 552.955656][T32727] team0: Port device team_slave_1 added [ 552.975505][ T4121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.026424][ T525] syzkaller1: entered promiscuous mode [ 553.032122][ T525] syzkaller1: entered allmulticast mode [ 553.054290][T32727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.061496][T32727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.087792][T32727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.099533][T32727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.106579][T32727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.132752][T32727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.146980][ T4121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.197025][T32727] hsr_slave_0: entered promiscuous mode [ 553.203472][T32727] hsr_slave_1: entered promiscuous mode [ 553.212493][T32727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.222050][T32727] Cannot create hsr debugfs directory [ 553.269089][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16418'. [ 553.330693][ T4121] bridge_slave_1: left allmulticast mode [ 553.337335][ T4121] bridge_slave_1: left promiscuous mode [ 553.343075][ T4121] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.354835][ T4121] bridge_slave_0: left promiscuous mode [ 553.360660][ T4121] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.494335][ T4121] erspan0 (unregistering): left allmulticast mode [ 553.609302][ T4121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.630707][ T4121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.651073][ T4121] bond0 (unregistering): Released all slaves [ 553.713229][ T4121] IPVS: stopping master sync thread 31663 ... [ 553.772535][ T4121] hsr_slave_0: left promiscuous mode [ 553.783222][ T4121] hsr_slave_1: left promiscuous mode [ 553.796528][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.804022][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.823540][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.831077][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.859812][ T4121] veth1_macvtap: left promiscuous mode [ 553.867741][ T4121] veth0_macvtap: left promiscuous mode [ 553.873609][ T4121] veth1_vlan: left promiscuous mode [ 553.879122][ T4121] veth0_vlan: left promiscuous mode [ 553.968677][ T4121] team0 (unregistering): Port device team_slave_1 removed [ 553.978678][ T4121] team0 (unregistering): Port device team_slave_0 removed [ 554.101727][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 554.101812][ T29] audit: type=1326 audit(2094.820:16614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=625 comm="syz.7.16421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7fc00000 [ 554.255296][T32727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.275200][T32727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.293210][T32727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.312021][T32727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.473104][T32727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.494996][T32727] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.512775][ T4120] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.519977][ T4120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.564400][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.571605][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.611683][ T773] netlink: 'syz.8.16451': attribute type 1 has an invalid length. [ 554.619736][ T773] netlink: 'syz.8.16451': attribute type 2 has an invalid length. [ 554.634102][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16451'. [ 554.713503][T32727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.850551][T32727] veth0_vlan: entered promiscuous mode [ 554.858572][T32727] veth1_vlan: entered promiscuous mode [ 554.878059][T32727] veth0_macvtap: entered promiscuous mode [ 554.885959][T32727] veth1_macvtap: entered promiscuous mode [ 554.897197][T32727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.911031][T32727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.920682][T32727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.930225][T32727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.939012][T32727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.947815][T32727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.996006][ T789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=789 comm=syz.0.16397 [ 555.075657][ T29] audit: type=1326 audit(2095.841:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.099835][ T29] audit: type=1326 audit(2095.841:16616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.138747][ T29] audit: type=1326 audit(2095.904:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.162644][ T29] audit: type=1326 audit(2095.904:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.186066][ T29] audit: type=1326 audit(2095.904:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.210137][ T29] audit: type=1326 audit(2095.904:16620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.233994][ T29] audit: type=1326 audit(2095.904:16621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.257131][ T29] audit: type=1326 audit(2095.904:16622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.281015][ T29] audit: type=1326 audit(2095.904:16623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.4.16441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 555.377380][ T813] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 555.447237][ T821] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 555.453846][ T821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 555.462303][ T821] vhci_hcd vhci_hcd.0: Device attached [ 555.474251][ T821] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 555.480962][ T821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 555.489389][ T821] vhci_hcd vhci_hcd.0: Device attached [ 555.495562][ T825] vhci_hcd: connection closed [ 555.495702][ T822] vhci_hcd: connection closed [ 555.495795][ T4090] vhci_hcd: stop threads [ 555.509778][ T4090] vhci_hcd: release socket [ 555.514223][ T4090] vhci_hcd: disconnect device [ 555.519209][ T4090] vhci_hcd: stop threads [ 555.523506][ T4090] vhci_hcd: release socket [ 555.528224][ T4090] vhci_hcd: disconnect device [ 555.654730][ T835] hub 2-0:1.0: USB hub found [ 555.660600][ T835] hub 2-0:1.0: 8 ports detected [ 557.507137][ T890] loop7: detected capacity change from 0 to 4096 [ 557.527520][ T890] EXT4-fs: test_dummy_encryption option not supported [ 557.778771][ T921] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 557.785368][ T921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 557.792845][ T921] vhci_hcd vhci_hcd.0: Device attached [ 557.812177][ T926] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 557.818835][ T926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 557.826608][ T926] vhci_hcd vhci_hcd.0: Device attached [ 557.837188][ T927] vhci_hcd: connection closed [ 557.837376][ T4081] vhci_hcd: stop threads [ 557.846479][ T4081] vhci_hcd: release socket [ 557.851076][ T4081] vhci_hcd: disconnect device [ 557.856037][ T922] vhci_hcd: connection closed [ 557.861864][ T4081] vhci_hcd: stop threads [ 557.871093][ T4081] vhci_hcd: release socket [ 557.875656][ T4081] vhci_hcd: disconnect device [ 558.127066][ T939] SELinux: syz.8.16492 (939) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 558.386137][ T952] netlink: 'syz.1.16508': attribute type 1 has an invalid length. [ 558.518161][ T965] hub 2-0:1.0: USB hub found [ 558.532709][ T965] hub 2-0:1.0: 8 ports detected [ 559.444797][ T1036] loop7: detected capacity change from 0 to 256 [ 559.466769][ T1036] FAT-fs (loop7): Directory bread(block 64) failed [ 559.494050][ T1036] FAT-fs (loop7): Directory bread(block 65) failed [ 559.503598][ T1036] FAT-fs (loop7): Directory bread(block 66) failed [ 559.510765][ T1036] FAT-fs (loop7): Directory bread(block 67) failed [ 559.520618][ T1036] FAT-fs (loop7): Directory bread(block 68) failed [ 559.530666][ T1036] FAT-fs (loop7): Directory bread(block 69) failed [ 559.540190][ T1036] FAT-fs (loop7): Directory bread(block 70) failed [ 559.548019][ T1036] FAT-fs (loop7): Directory bread(block 71) failed [ 559.557568][ T1036] FAT-fs (loop7): Directory bread(block 72) failed [ 559.564946][ T1036] FAT-fs (loop7): Directory bread(block 73) failed [ 559.881409][ T1065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.903799][ T1065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.155690][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 560.155709][ T29] audit: type=1400 audit(2101.199:16639): avc: denied { accept } for pid=1076 comm="syz.4.16531" lport=60797 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.209914][ T1079] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 560.216572][ T1079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 560.224115][ T1079] vhci_hcd vhci_hcd.0: Device attached [ 560.233490][ T1042] syz.1.16523 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 560.245326][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: syz.1.16523 Tainted: G W 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 560.245369][ T1042] Tainted: [W]=WARN [ 560.245378][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.245393][ T1042] Call Trace: [ 560.245401][ T1042] [ 560.245410][ T1042] __dump_stack+0x1d/0x30 [ 560.245477][ T1042] dump_stack_lvl+0xe8/0x140 [ 560.245507][ T1042] dump_stack+0x15/0x1b [ 560.245549][ T1042] dump_header+0x81/0x220 [ 560.245619][ T1042] oom_kill_process+0x334/0x3f0 [ 560.245665][ T1042] out_of_memory+0x979/0xb80 [ 560.245782][ T1042] try_charge_memcg+0x5e6/0x9e0 [ 560.245813][ T1042] charge_memcg+0x51/0xc0 [ 560.245879][ T1042] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 560.245925][ T1042] __read_swap_cache_async+0x1df/0x350 [ 560.245971][ T1042] swap_cluster_readahead+0x277/0x3e0 [ 560.246019][ T1042] swapin_readahead+0xde/0x6f0 [ 560.246152][ T1042] ? __filemap_get_folio+0x4f7/0x6b0 [ 560.246189][ T1042] ? swap_cache_get_folio+0x77/0x200 [ 560.246261][ T1042] do_swap_page+0x301/0x2430 [ 560.246287][ T1042] ? finish_task_switch+0xad/0x2b0 [ 560.246362][ T1042] ? __pfx_default_wake_function+0x10/0x10 [ 560.246508][ T1042] handle_mm_fault+0x9a5/0x2be0 [ 560.246531][ T1042] ? mas_walk+0xf2/0x120 [ 560.246615][ T1042] do_user_addr_fault+0x636/0x1090 [ 560.246648][ T1042] ? fpregs_restore_userregs+0xe2/0x1d0 [ 560.246786][ T1042] ? switch_fpu_return+0xe/0x20 [ 560.246877][ T1042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 560.246978][ T1042] exc_page_fault+0x62/0xa0 [ 560.247005][ T1042] asm_exc_page_fault+0x26/0x30 [ 560.247026][ T1042] RIP: 0033:0x7f84e5d56750 [ 560.247046][ T1042] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 560.247089][ T1042] RSP: 002b:00007ffc7d791228 EFLAGS: 00010246 [ 560.247109][ T1042] RAX: 0000000000000000 RBX: 00007f84e5f55fa0 RCX: 00007f84e5d611e5 [ 560.247125][ T1042] RDX: 00007ffc7d791270 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.247139][ T1042] RBP: 00007f84e5f57ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 560.247151][ T1042] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008a03a [ 560.247163][ T1042] R13: 00007ffc7d791390 R14: ffffffffffffffff R15: 00007ffc7d7913b0 [ 560.247181][ T1042] [ 560.480177][ T1042] memory: usage 307200kB, limit 307200kB, failcnt 248 [ 560.487160][ T1042] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 560.495110][ T1042] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 560.502420][ T1042] Memory cgroup stats for /syz1: [ 560.506166][ T1042] cache 0 [ 560.513904][ T1087] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 560.520694][ T1087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.528378][ T1042] rss 0 [ 560.528380][ T1087] vhci_hcd vhci_hcd.0: Device attached [ 560.536734][ T1042] shmem 0 [ 560.539696][ T1042] mapped_file 0 [ 560.543862][ T1042] dirty 0 [ 560.546826][ T1042] writeback 0 [ 560.550245][ T1042] workingset_refault_anon 1122 [ 560.555053][ T1042] workingset_refault_file 87 [ 560.559658][ T1042] swap 376832 [ 560.563016][ T1042] swapcached 8192 [ 560.566670][ T1042] pgpgin 204117 [ 560.570584][ T1088] vhci_hcd: connection closed [ 560.570701][ T1082] vhci_hcd: connection closed [ 560.575598][ T1042] pgpgout 204114 [ 560.583895][ T1042] pgfault 260907 [ 560.587624][ T1042] pgmajfault 178 [ 560.591291][ T1042] inactive_anon 8192 [ 560.595296][ T1042] active_anon 0 [ 560.598827][ T31] vhci_hcd: stop threads [ 560.598836][ T31] vhci_hcd: release socket [ 560.598853][ T31] vhci_hcd: disconnect device [ 560.612899][ T1042] inactive_file 0 [ 560.616649][ T1042] active_file 4096 [ 560.620431][ T1042] unevictable 0 [ 560.623349][ T31] vhci_hcd: stop threads [ 560.623920][ T1042] hierarchical_memory_limit 314572800 [ 560.623933][ T1042] hierarchical_memsw_limit 9223372036854771712 [ 560.628318][ T31] vhci_hcd: release socket [ 560.628334][ T31] vhci_hcd: disconnect device [ 560.650000][ T1042] total_cache 0 [ 560.653491][ T1042] total_rss 0 [ 560.657448][ T1042] total_shmem 0 [ 560.660968][ T1042] total_mapped_file 0 [ 560.665050][ T1042] total_dirty 0 [ 560.668545][ T1042] total_writeback 0 [ 560.672401][ T1042] total_workingset_refault_anon 1122 [ 560.677708][ T1042] total_workingset_refault_file 87 [ 560.682820][ T1042] total_swap 376832 [ 560.687404][ T1042] total_swapcached 8192 [ 560.691622][ T1042] total_pgpgin 204117 [ 560.695760][ T1042] total_pgpgout 204114 [ 560.699898][ T1042] total_pgfault 260907 [ 560.703993][ T1042] total_pgmajfault 178 [ 560.708073][ T1042] total_inactive_anon 8192 [ 560.712507][ T1042] total_active_anon 0 [ 560.717068][ T1042] total_inactive_file 0 [ 560.721248][ T1042] total_active_file 4096 [ 560.725529][ T1042] total_unevictable 0 [ 560.729578][ T1042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16523,pid=1042,uid=0 [ 560.744956][ T1042] Memory cgroup out of memory: Killed process 1042 (syz.1.16523) total-vm:95800kB, anon-rss:1064kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 560.762381][ T3382] vhci_hcd: vhci_device speed not set [ 560.847676][ T29] audit: type=1400 audit(2101.925:16640): avc: denied { write } for pid=1101 comm="syz.4.16541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 560.923208][ T1108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16544'. [ 560.998676][ T29] audit: type=1326 audit(2102.073:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.021879][ T29] audit: type=1326 audit(2102.073:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.044933][ T29] audit: type=1326 audit(2102.073:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.075197][ T29] audit: type=1326 audit(2102.083:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.099373][ T29] audit: type=1326 audit(2102.083:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.122522][ T29] audit: type=1326 audit(2102.083:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.146882][ T29] audit: type=1326 audit(2102.136:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1131 comm="syz.8.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 561.365673][ T29] audit: type=1326 audit(2102.462:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1160 comm="syz.1.16558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 561.398712][ T1157] ref_ctr increment failed for inode: 0x66b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881096b9140 [ 561.426165][ T1156] uprobe: syz.8.16556:1156 failed to unregister, leaking uprobe [ 561.776123][ T1191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16570'. [ 561.796682][ T1191] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.805636][ T1191] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.814360][ T1191] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.823789][ T1191] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.837233][ T1191] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.846974][ T1191] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.855943][ T1191] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.865063][ T1191] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.884306][ T1196] wg2: entered promiscuous mode [ 561.889273][ T1196] wg2: entered allmulticast mode [ 562.030251][ T1228] netlink: 'syz.0.16574': attribute type 1 has an invalid length. [ 562.038232][ T1228] netlink: 'syz.0.16574': attribute type 2 has an invalid length. [ 562.052849][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16574'. [ 562.231197][ T1240] SELinux: security policydb version 18 (MLS) not backwards compatible [ 562.239740][ T1240] SELinux: failed to load policy [ 562.302475][ T1242] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16580'. [ 562.465766][ T1263] loop7: detected capacity change from 0 to 1024 [ 562.513888][ T1263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.559392][ T1263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.571903][ T1289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16592'. [ 563.619838][ T1363] netlink: 36 bytes leftover after parsing attributes in process `syz.7.16616'. [ 563.903028][ T1385] netlink: 'syz.1.16625': attribute type 1 has an invalid length. [ 563.911011][ T1385] netlink: 'syz.1.16625': attribute type 4 has an invalid length. [ 563.918904][ T1385] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.16625'. [ 564.007750][ T1385] netlink: 'syz.1.16625': attribute type 1 has an invalid length. [ 564.015685][ T1385] netlink: 'syz.1.16625': attribute type 4 has an invalid length. [ 564.024350][ T1385] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.16625'. [ 564.892688][ T1480] wg2: entered promiscuous mode [ 564.898367][ T1480] wg2: entered allmulticast mode [ 564.952461][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 564.952480][ T29] audit: type=1400 audit(2106.240:16754): avc: denied { prog_load } for pid=1485 comm="syz.1.16644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 564.977609][ T29] audit: type=1400 audit(2106.240:16755): avc: denied { bpf } for pid=1485 comm="syz.1.16644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.997942][ T29] audit: type=1400 audit(2106.240:16756): avc: denied { perfmon } for pid=1485 comm="syz.1.16644" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 565.107198][ T29] audit: type=1400 audit(2106.314:16757): avc: denied { prog_run } for pid=1485 comm="syz.1.16644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 565.108866][ T1497] netlink: 'syz.7.16648': attribute type 1 has an invalid length. [ 565.126018][ T29] audit: type=1400 audit(2106.335:16758): avc: denied { map_create } for pid=1489 comm="syz.7.16646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 565.134658][ T1497] netlink: 'syz.7.16648': attribute type 2 has an invalid length. [ 565.152715][ T29] audit: type=1400 audit(2106.345:16759): avc: denied { map_read map_write } for pid=1489 comm="syz.7.16646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 565.178691][ T1497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16648'. [ 565.180110][ T29] audit: type=1400 audit(2106.345:16760): avc: denied { read write } for pid=32727 comm="syz-executor" name="loop0" dev="devtmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 565.212096][ T29] audit: type=1400 audit(2106.345:16761): avc: denied { open } for pid=32727 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 565.235002][ T29] audit: type=1400 audit(2106.356:16762): avc: denied { create } for pid=1489 comm="syz.7.16646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.254392][ T29] audit: type=1400 audit(2106.356:16763): avc: denied { connect } for pid=1489 comm="syz.7.16646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.588306][ T1517] hub 6-0:1.0: USB hub found [ 565.593201][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16659'. [ 565.605519][ T1519] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.614389][ T1519] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.623171][ T1519] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.632028][ T1519] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.645514][ T1517] hub 6-0:1.0: 8 ports detected [ 565.696308][ T1519] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.706104][ T1519] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.715054][ T1519] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.724064][ T1519] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.907231][ T1564] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 565.918857][ T1561] IPVS: stopping master sync thread 1564 ... [ 565.982621][ T1578] netlink: 136 bytes leftover after parsing attributes in process `syz.0.16670'. [ 565.991846][ T1578] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 566.163609][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16673'. [ 566.200812][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16673'. [ 566.279505][ T1603] netlink: 'syz.7.16677': attribute type 1 has an invalid length. [ 566.348192][ T1603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.393417][ T1643] bond1: (slave dummy0): making interface the new active one [ 566.436622][ T1643] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 566.452705][ T1608] geneve0: entered allmulticast mode [ 567.703902][ T1752] netlink: 'syz.8.16712': attribute type 4 has an invalid length. [ 567.724621][ T1752] netlink: 'syz.8.16712': attribute type 4 has an invalid length. [ 567.795255][ T1765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16717'. [ 567.814526][ T1765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16717'. [ 568.360725][ T1813] netlink: 136 bytes leftover after parsing attributes in process `syz.7.16726'. [ 568.370733][ T1813] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 568.493704][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16739'. [ 568.519480][ T1820] loop7: detected capacity change from 0 to 1024 [ 568.533020][ T1818] IPVS: Error joining to the multicast group [ 568.553138][ T1820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.733482][ T1835] pim6reg1: entered promiscuous mode [ 568.738864][ T1835] pim6reg1: entered allmulticast mode [ 569.059729][ T1874] bridge: RTM_NEWNEIGH with invalid ether address [ 569.177556][ T1883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16742'. [ 569.254687][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.343168][ T1911] ref_ctr increment failed for inode: 0x77d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811a166d40 [ 569.388993][ T1908] uprobe: syz.8.16750:1908 failed to unregister, leaking uprobe [ 569.428836][ T1920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16752'. [ 569.468446][ T1920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16752'. [ 569.561864][ T1937] loop7: detected capacity change from 0 to 128 [ 569.715912][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 569.715932][ T29] audit: type=1326 audit(2111.249:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f84e5d2e9b7 code=0x7ffc0000 [ 569.769923][ T29] audit: type=1326 audit(2111.312:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84e5d2d290 code=0x7ffc0000 [ 569.817487][ T29] audit: type=1326 audit(2111.333:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84e5d2d58a code=0x7ffc0000 [ 569.841172][ T29] audit: type=1326 audit(2111.333:16965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 569.865015][ T29] audit: type=1326 audit(2111.344:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 569.888116][ T29] audit: type=1326 audit(2111.344:16967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 569.912096][ T29] audit: type=1326 audit(2111.344:16968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 569.935224][ T29] audit: type=1326 audit(2111.344:16969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.1.16773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 570.059117][ T29] audit: type=1400 audit(2111.523:16970): avc: denied { create } for pid=1971 comm="syz.7.16765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 570.086301][ T1977] loop7: detected capacity change from 0 to 2048 [ 570.123726][ T1977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.173366][ T2006] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 570.178206][ T1999] IPVS: stopping master sync thread 2006 ... [ 570.287578][ T29] audit: type=1400 audit(2111.849:16971): avc: denied { create } for pid=2014 comm="syz.0.16770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.681452][ T2092] xt_hashlimit: max too large, truncated to 1048576 [ 570.763239][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.929992][ T2190] __nla_validate_parse: 2 callbacks suppressed [ 571.930143][ T2190] netlink: 48 bytes leftover after parsing attributes in process `syz.8.16818'. [ 571.961538][ T2194] netlink: 'syz.1.16820': attribute type 10 has an invalid length. [ 572.143700][ T2228] veth0: entered promiscuous mode [ 572.149981][ T2228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16828'. [ 572.181706][ T2226] netlink: 'syz.1.16826': attribute type 27 has an invalid length. [ 572.227478][ T2226] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.234837][ T2226] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.294007][ T2226] wg2: left promiscuous mode [ 572.298818][ T2226] wg2: left allmulticast mode [ 572.349759][ T2226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.361268][ T2226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.428142][ T2226] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.437324][ T2226] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.446466][ T2226] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.455425][ T2226] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.483213][ T2238] wireguard0: entered promiscuous mode [ 572.506170][ T2258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2258 comm=syz.0.16835 [ 572.533632][ T2241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.540877][ T2260] netlink: zone id is out of range [ 572.542170][ T2241] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.546199][ T2260] netlink: zone id is out of range [ 572.558609][ T2260] netlink: zone id is out of range [ 572.563960][ T2260] netlink: zone id is out of range [ 572.569158][ T2260] netlink: zone id is out of range [ 572.574467][ T2260] netlink: zone id is out of range [ 572.579665][ T2260] netlink: zone id is out of range [ 572.585392][ T2260] netlink: zone id is out of range [ 572.590512][ T2260] netlink: zone id is out of range [ 572.595740][ T2260] netlink: zone id is out of range [ 572.601826][ T2251] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 572.787883][ T2276] ref_ctr increment failed for inode: 0x1c8 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811a166d40 [ 572.808976][ T2275] uprobe: syz.7.16843:2275 failed to unregister, leaking uprobe [ 572.878950][ T2293] netlink: 'syz.8.16852': attribute type 1 has an invalid length. [ 572.880425][ T2291] netlink: 'syz.1.16851': attribute type 11 has an invalid length. [ 572.894868][ T2291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16851'. [ 572.918984][ T2293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.021562][ T2329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.045214][ T2329] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 573.060913][ T2329] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 573.178565][ T2354] SELinux: ebitmap: truncated map [ 573.204351][ T2354] SELinux: failed to load policy [ 573.371236][ T2376] ref_ctr increment failed for inode: 0x1ef offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811a162840 [ 573.402734][ T2373] uprobe: syz.0.16866:2373 failed to unregister, leaking uprobe [ 573.421608][ T2383] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16872'. [ 573.588769][ T2389] loop7: detected capacity change from 0 to 512 [ 573.752632][ T2389] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.16873: Parent and EA inode have the same ino 15 [ 573.869407][ T2429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16880'. [ 573.883752][ T2389] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.16873: Parent and EA inode have the same ino 15 [ 573.889539][ T2429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16880'. [ 573.916753][ T2389] EXT4-fs (loop7): 1 orphan inode deleted [ 573.991921][ T2389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.304373][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.355796][ T2451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2451 comm=syz.7.16888 [ 574.430968][ T2456] netlink: 36 bytes leftover after parsing attributes in process `syz.7.16893'. [ 574.474943][ T2464] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16895'. [ 574.495953][ T2464] batadv1: entered promiscuous mode [ 574.501378][ T2464] batadv1: entered allmulticast mode [ 574.511232][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 574.511252][ T29] audit: type=1400 audit(2116.299:17069): avc: denied { connect } for pid=2467 comm="syz.7.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 574.536937][ T29] audit: type=1400 audit(2116.299:17070): avc: denied { write } for pid=2467 comm="syz.7.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 574.560115][ T29] audit: type=1400 audit(2116.352:17071): avc: denied { read } for pid=2467 comm="syz.7.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 574.710142][ T29] audit: type=1400 audit(2116.499:17072): avc: denied { bind } for pid=2486 comm="syz.8.16904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 574.729462][ T29] audit: type=1400 audit(2116.499:17073): avc: denied { name_bind } for pid=2486 comm="syz.8.16904" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 574.750619][ T29] audit: type=1400 audit(2116.499:17074): avc: denied { node_bind } for pid=2486 comm="syz.8.16904" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 574.752820][ T2484] loop7: detected capacity change from 0 to 164 [ 574.793734][ T29] audit: type=1400 audit(2116.573:17075): avc: denied { setopt } for pid=2486 comm="syz.8.16904" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 574.822074][ T2484] syz.7.16902: attempt to access beyond end of device [ 574.822074][ T2484] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 574.825889][ T29] audit: type=1400 audit(2116.625:17076): avc: denied { mount } for pid=2483 comm="syz.7.16902" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 574.870887][ T2484] syz.7.16902: attempt to access beyond end of device [ 574.870887][ T2484] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 574.884651][ T29] audit: type=1326 audit(2116.678:17077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.8.16905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 574.909561][ T29] audit: type=1326 audit(2116.699:17078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.8.16905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 574.966314][ T2500] netlink: 'syz.4.16903': attribute type 10 has an invalid length. [ 575.085004][ T2509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16912'. [ 575.130043][ T2516] netlink: 'syz.0.16915': attribute type 1 has an invalid length. [ 575.160088][ T2516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.207719][ T2516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.228476][ T2516] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 575.250533][ T2516] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 575.447460][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16925'. [ 575.546280][ T2592] loop7: detected capacity change from 0 to 512 [ 575.584358][ T2592] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 575.593056][ T2592] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 575.607303][ T2592] System zones: 0-1, 15-15, 18-18, 34-34 [ 575.613289][ T2592] EXT4-fs (loop7): orphan cleanup on readonly fs [ 575.620736][ T2592] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 575.635441][ T2592] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 575.652305][ T2592] EXT4-fs (loop7): 1 truncate cleaned up [ 575.658570][ T2592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 575.746989][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.805168][ T2607] netlink: 'syz.1.16934': attribute type 1 has an invalid length. [ 575.841708][ T2607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.907734][ T2651] loop7: detected capacity change from 0 to 128 [ 575.982946][ T2607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.020095][ T2607] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 576.056436][ T2607] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 576.404101][ T2714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2714 comm=syz.4.16958 [ 576.546372][ T2718] netlink: 'syz.4.16959': attribute type 1 has an invalid length. [ 576.599286][ T2718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.742335][ T2718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.750268][ T2718] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 576.780853][ T2718] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 577.014583][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 577.021225][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 577.028814][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.057361][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 577.063942][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 577.071664][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.088573][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 577.095155][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 577.102707][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.124774][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 577.131349][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 577.139064][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.148899][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 577.155594][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 577.163477][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.181486][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 577.188164][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 577.191247][ T2817] __nla_validate_parse: 1 callbacks suppressed [ 577.191268][ T2817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16981'. [ 577.196148][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.224903][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 577.231571][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 577.239441][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.253816][ T2791] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(17) [ 577.260670][ T2791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 577.268419][ T2791] vhci_hcd vhci_hcd.0: Device attached [ 577.274722][ T2830] vhci_hcd: connection closed [ 577.274857][ T2814] vhci_hcd: connection closed [ 577.275005][ T2802] vhci_hcd: connection closed [ 577.279690][ T2810] vhci_hcd: connection closed [ 577.279885][ T2792] vhci_hcd: connection closed [ 577.284675][ T2797] vhci_hcd: connection closed [ 577.290172][ T3382] usb 15-1: new low-speed USB device number 3 using vhci_hcd [ 577.298466][ T2834] vhci_hcd: connection closed [ 577.298934][ T2812] vhci_hcd: connection closed [ 577.303455][ T4115] vhci_hcd: stop threads [ 577.313691][ T2794] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 577.315506][ T4115] vhci_hcd: release socket [ 577.315534][ T4115] vhci_hcd: disconnect device [ 577.316242][ T4115] vhci_hcd: stop threads [ 577.344856][ T4115] vhci_hcd: release socket [ 577.349279][ T4115] vhci_hcd: disconnect device [ 577.354656][ T4115] vhci_hcd: stop threads [ 577.358967][ T4115] vhci_hcd: release socket [ 577.363590][ T4115] vhci_hcd: disconnect device [ 577.368827][ T4115] vhci_hcd: stop threads [ 577.373191][ T4115] vhci_hcd: release socket [ 577.377648][ T4115] vhci_hcd: disconnect device [ 577.394887][ T4115] vhci_hcd: stop threads [ 577.399368][ T4115] vhci_hcd: release socket [ 577.403919][ T4115] vhci_hcd: disconnect device [ 577.408175][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16984'. [ 577.418480][ T4115] vhci_hcd: stop threads [ 577.423572][ T4115] vhci_hcd: release socket [ 577.428058][ T4115] vhci_hcd: disconnect device [ 577.433395][ T4115] vhci_hcd: stop threads [ 577.437857][ T4115] vhci_hcd: release socket [ 577.442380][ T4115] vhci_hcd: disconnect device [ 577.447522][ T4115] vhci_hcd: stop threads [ 577.450840][ T2839] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 577.452584][ T4115] vhci_hcd: release socket [ 577.463727][ T4115] vhci_hcd: disconnect device [ 577.517164][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16988'. [ 577.634692][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16993'. [ 577.988903][ T2920] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17005'. [ 578.064648][ T2934] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17011'. [ 578.157092][ T2957] netlink: 'syz.8.17026': attribute type 15 has an invalid length. [ 578.945754][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17023'. [ 578.954920][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17023'. [ 579.007625][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17023'. [ 579.041765][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17023'. [ 579.224810][ T3035] block device autoloading is deprecated and will be removed. [ 579.379231][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 579.379283][ T29] audit: type=1326 audit(2121.422:17188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.457437][ T29] audit: type=1326 audit(2121.464:17189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.481298][ T29] audit: type=1326 audit(2121.464:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.505213][ T29] audit: type=1326 audit(2121.464:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.528375][ T29] audit: type=1326 audit(2121.464:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.553587][ T29] audit: type=1326 audit(2121.464:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.576905][ T29] audit: type=1326 audit(2121.464:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.600671][ T29] audit: type=1326 audit(2121.464:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3066 comm="syz.0.17037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bddce929 code=0x7ffc0000 [ 579.642658][ T29] audit: type=1400 audit(2121.696:17196): avc: denied { bind } for pid=3071 comm="syz.4.17040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 579.703179][ T29] audit: type=1326 audit(2121.759:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2999 comm="syz.7.17022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f2455e929 code=0x7fc00000 [ 580.714629][ T3251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.779880][ T3251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.841054][ T3272] loop7: detected capacity change from 0 to 1024 [ 580.860288][ T3272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.883363][ T3251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.901401][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.931776][ T3251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.002553][ T3251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.020499][ T3251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.035130][ T3251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.050682][ T3251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.473067][ T3383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.514616][ T3383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.531485][ T3394] netlink: 'syz.1.17099': attribute type 4 has an invalid length. [ 581.550006][ T3394] netlink: 'syz.1.17099': attribute type 4 has an invalid length. [ 581.606160][ T3383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.659263][ T3383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.768333][ T3383] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.790682][ T3383] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.820636][ T3383] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.845163][ T3383] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.845633][ T3447] 9pnet_fd: Insufficient options for proto=fd [ 582.107167][ T3471] __nla_validate_parse: 14 callbacks suppressed [ 582.107186][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17135'. [ 582.141755][ T3382] usb 15-1: enqueue for inactive port 0 [ 582.147542][ T3382] usb 15-1: enqueue for inactive port 0 [ 582.221619][ T3382] vhci_hcd: vhci_device speed not set [ 582.239057][ T3494] netlink: 596 bytes leftover after parsing attributes in process `syz.4.17132'. [ 582.320737][ T3507] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 582.432770][ T3515] bond2: entered promiscuous mode [ 582.437995][ T3515] bond2: entered allmulticast mode [ 582.488057][ T3515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.539716][ T3515] bond2 (unregistering): Released all slaves [ 583.029654][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17163'. [ 583.029689][ T3632] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 583.063501][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17163'. [ 583.486712][ T3666] rdma_op ffff88811d2fa580 conn xmit_rdma 0000000000000000 [ 583.859580][ T3696] ipvlan2: entered promiscuous mode [ 583.878225][ T3696] bridge0: port 3(ipvlan2) entered blocking state [ 583.885053][ T3696] bridge0: port 3(ipvlan2) entered disabled state [ 583.922555][ T3696] ipvlan2: entered allmulticast mode [ 583.927929][ T3696] bridge0: entered allmulticast mode [ 583.938279][ T3696] ipvlan2: left allmulticast mode [ 583.943438][ T3696] bridge0: left allmulticast mode [ 583.995066][ T3708] wg2: left promiscuous mode [ 583.999784][ T3708] wg2: left allmulticast mode [ 584.043256][ T3708] wg2: entered promiscuous mode [ 584.048356][ T3708] wg2: entered allmulticast mode [ 584.300906][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 584.300988][ T29] audit: type=1326 audit(2126.598:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9cfd658e7 code=0x7ffc0000 [ 584.330874][ T29] audit: type=1326 audit(2126.598:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9cfd0ab19 code=0x7ffc0000 [ 584.354669][ T29] audit: type=1326 audit(2126.598:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9cfd658e7 code=0x7ffc0000 [ 584.377699][ T29] audit: type=1326 audit(2126.598:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9cfd0ab19 code=0x7ffc0000 [ 584.401520][ T29] audit: type=1326 audit(2126.598:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.424762][ T29] audit: type=1326 audit(2126.598:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.475115][ T3740] netlink: 'syz.4.17204': attribute type 12 has an invalid length. [ 584.481086][ T29] audit: type=1326 audit(2126.682:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.506532][ T29] audit: type=1326 audit(2126.682:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.529815][ T29] audit: type=1326 audit(2126.682:17246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.553209][ T29] audit: type=1326 audit(2126.682:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 584.600731][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17207'. [ 584.635576][ T3744] bond1: (slave dummy0): Releasing active interface [ 584.661826][ T3744] bridge_slave_0: left allmulticast mode [ 584.667698][ T3744] bridge_slave_0: left promiscuous mode [ 584.673473][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.676467][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17206'. [ 584.693358][ T3744] bridge_slave_1: left allmulticast mode [ 584.699059][ T3744] bridge_slave_1: left promiscuous mode [ 584.705433][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.736785][ T3744] bond0: (slave bond_slave_0): Releasing backup interface [ 584.770034][ T3744] bond0: (slave bond_slave_1): Releasing backup interface [ 584.808624][ T3744] team0: Port device team_slave_0 removed [ 584.847032][ T3744] team0: Port device team_slave_1 removed [ 584.854177][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.862512][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.882050][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.890344][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.945392][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17209'. [ 584.954678][ T3751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17209'. [ 584.963861][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17209'. [ 584.997738][ T3751] netlink: 'syz.1.17209': attribute type 6 has an invalid length. [ 585.008306][ T3760] netlink: 'syz.4.17206': attribute type 2 has an invalid length. [ 585.671033][ T3819] netlink: 'syz.1.17229': attribute type 3 has an invalid length. [ 585.831045][ T3833] sd 0:0:1:0: device reset [ 586.219863][ T3866] netlink: 'syz.7.17245': attribute type 17 has an invalid length. [ 586.232747][ T3866] net_ratelimit: 24 callbacks suppressed [ 586.232764][ T3866] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 586.304053][ T3872] netlink: 'syz.8.17250': attribute type 4 has an invalid length. [ 586.316878][ T3872] netlink: 'syz.8.17250': attribute type 4 has an invalid length. [ 586.382589][ T3874] loop7: detected capacity change from 0 to 8192 [ 586.576788][ T3909] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 587.106722][ T3951] __nla_validate_parse: 7 callbacks suppressed [ 587.106740][ T3951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17282'. [ 587.149146][ T3951] netlink: 'syz.1.17282': attribute type 2 has an invalid length. [ 587.678859][ T3978] tipc: Started in network mode [ 587.683811][ T3978] tipc: Node identity ac14140f, cluster identity 4711 [ 587.691777][ T3978] tipc: New replicast peer: 0.0.255.255 [ 587.697511][ T3978] tipc: Enabled bearer , priority 10 [ 587.714600][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17287'. [ 587.738472][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17287'. [ 588.080365][ T4005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17296'. [ 588.334737][T16019] IPVS: starting estimator thread 0... [ 588.420020][ T4019] IPVS: using max 1968 ests per chain, 98400 per kthread [ 588.493348][ T4034] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 588.772639][T30113] tipc: Node number set to 2886997007 [ 588.805661][ T4073] IPv6: Can't replace route, no match found [ 588.913757][ T4145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17330'. [ 589.000958][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17335'. [ 589.015070][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17335'. [ 589.399919][ T4206] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 589.417225][ T4209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17350'. [ 589.492809][ T4226] rdma_op ffff888126ce8d80 conn xmit_rdma 0000000000000000 [ 589.552641][ T4232] program syz.7.17355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.043088][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 590.043108][ T29] audit: type=1326 audit(2132.634:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.076456][ T29] audit: type=1326 audit(2132.634:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.102360][ T29] audit: type=1326 audit(2132.676:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.126367][ T29] audit: type=1326 audit(2132.676:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.149667][ T29] audit: type=1326 audit(2132.676:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.242380][ T4308] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 590.265968][ T29] audit: type=1326 audit(2132.708:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.289191][ T29] audit: type=1326 audit(2132.708:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.313072][ T29] audit: type=1326 audit(2132.708:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.336194][ T29] audit: type=1326 audit(2132.771:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.360035][ T29] audit: type=1326 audit(2132.771:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.8.17375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x7ffc0000 [ 590.555463][ T4328] tipc: Failed to remove unknown binding: 66,1,1/2886997007:430435258/430435260 [ 590.604148][ T4333] ipvlan2: entered promiscuous mode [ 590.611432][ T4333] bridge0: port 3(ipvlan2) entered blocking state [ 590.618108][ T4333] bridge0: port 3(ipvlan2) entered disabled state [ 590.624999][ T4333] ipvlan2: entered allmulticast mode [ 590.630370][ T4333] bridge0: entered allmulticast mode [ 590.636310][ T4333] ipvlan2: left allmulticast mode [ 590.641460][ T4333] bridge0: left allmulticast mode [ 590.874853][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17401'. [ 590.930996][ T4384] ipvlan2: entered promiscuous mode [ 590.944360][ T4384] bridge0: port 1(ipvlan2) entered blocking state [ 590.951719][ T4384] bridge0: port 1(ipvlan2) entered disabled state [ 590.962278][ T4384] ipvlan2: entered allmulticast mode [ 590.967664][ T4384] bridge0: entered allmulticast mode [ 590.975030][ T4384] ipvlan2: left allmulticast mode [ 590.980868][ T4384] bridge0: left allmulticast mode [ 591.354120][ T4447] 9pnet_fd: Insufficient options for proto=fd [ 591.396719][ T4454] loop7: detected capacity change from 0 to 128 [ 591.423008][ T4454] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 591.431029][ T4454] FAT-fs (loop7): Filesystem has been set read-only [ 591.441201][ T4454] syz.7.17423: attempt to access beyond end of device [ 591.441201][ T4454] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 591.456448][ T4454] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 591.464516][ T4454] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 591.473424][ T4454] syz.7.17423: attempt to access beyond end of device [ 591.473424][ T4454] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 591.506737][ T4454] syz.7.17423: attempt to access beyond end of device [ 591.506737][ T4454] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 592.342989][ T4520] __nla_validate_parse: 9 callbacks suppressed [ 592.343006][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17440'. [ 592.361413][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17440'. [ 592.445245][ T4533] @: renamed from vlan0 (while UP) [ 592.460928][ T4536] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 592.488398][ T4538] tipc: Started in network mode [ 592.493379][ T4538] tipc: Node identity 7f000001, cluster identity 4711 [ 592.500295][ T4538] tipc: Enabling of bearer rejected, failed to enable media [ 592.550777][ T4544] 9pnet_fd: Insufficient options for proto=fd [ 592.743525][ T4566] loop7: detected capacity change from 0 to 1024 [ 592.767520][ T4566] EXT4-fs: Ignoring removed orlov option [ 592.773536][ T4566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 592.816901][ T4566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.869840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.934551][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.997728][ T4601] netlink: 92 bytes leftover after parsing attributes in process `syz.8.17474'. [ 593.379722][ T4644] netlink: 332 bytes leftover after parsing attributes in process `syz.8.17491'. [ 593.527026][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17498'. [ 593.786111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.798304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.809602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.821347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.832091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.843674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.856435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.867438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.880476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.338712][ T4723] vlan2: entered allmulticast mode [ 594.346112][ T4723] dummy0: entered allmulticast mode [ 594.382880][ T4734] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.17524'. [ 594.383501][ T4732] @: renamed from vlan0 (while UP) [ 594.392289][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17524'. [ 594.470705][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17531'. [ 594.542649][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17533'. [ 594.831764][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 594.831783][ T29] audit: type=1326 audit(2137.672:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 594.861358][ T29] audit: type=1326 audit(2137.672:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 594.896270][ T29] audit: type=1326 audit(2137.735:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x0 [ 594.919030][ T29] audit: type=1326 audit(2137.735:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 594.942306][ T29] audit: type=1326 audit(2137.735:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 594.965605][ T29] audit: type=1326 audit(2137.735:17480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 594.991989][ T29] audit: type=1326 audit(2137.766:17481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 595.015149][ T29] audit: type=1326 audit(2137.766:17482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 595.038542][ T29] audit: type=1326 audit(2137.766:17483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.4.17547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 595.120693][ T29] audit: type=1326 audit(2137.977:17484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.8.17552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9cfd6e929 code=0x0 [ 595.514874][ T4848] loop7: detected capacity change from 0 to 1024 [ 595.522432][ T4848] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 595.536642][ T4848] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 595.546480][ T4848] EXT4-fs (loop7): orphan cleanup on readonly fs [ 595.555756][ T4848] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.17570: bg 0: block 10: padding at end of block bitmap is not set [ 595.570718][ T4848] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.17570: Failed to acquire dquot type 0 [ 595.585189][ T4848] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.17570: Failed to acquire dquot type 0 [ 595.596940][ T4848] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.17570: Freeing blocks not in datazone - block = 0, count = 4096 [ 595.615546][ T4848] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.17570: Failed to acquire dquot type 0 [ 595.637168][ T4848] EXT4-fs (loop7): 1 orphan inode deleted [ 595.647640][ T4848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.692590][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.742822][ T4858] loop7: detected capacity change from 0 to 128 [ 595.835820][ T4869] netlink: 'syz.7.17576': attribute type 4 has an invalid length. [ 595.955332][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17581'. [ 595.998612][ T4885] ref_ctr_offset mismatch. inode: 0xacd offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 596.179116][ T4914] bridge_slave_0: left allmulticast mode [ 596.184845][ T4921] block device autoloading is deprecated and will be removed. [ 596.184884][ T4914] bridge_slave_0: left promiscuous mode [ 596.198470][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.214852][ T4914] bridge_slave_1: left allmulticast mode [ 596.220635][ T4914] bridge_slave_1: left promiscuous mode [ 596.226337][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.243385][ T4914] bond0: (slave bond_slave_0): Releasing backup interface [ 596.262570][ T4914] bond0: (slave bond_slave_1): Releasing backup interface [ 596.278880][ T4914] team0: Port device team_slave_0 removed [ 596.289487][ T4914] team0: Port device team_slave_1 removed [ 596.299002][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.306563][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.318591][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.326138][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.377514][ T4918] macvlan1: entered promiscuous mode [ 596.389635][ T4918] ipvlan0: entered promiscuous mode [ 596.396767][ T4918] ipvlan0: left promiscuous mode [ 596.403945][ T4918] macvlan1: left promiscuous mode [ 596.421450][T30125] syz!: Port: 1 Link DOWN [ 596.633886][ T4966] vlan0: entered allmulticast mode [ 596.641843][ T4966] dummy0: entered allmulticast mode [ 596.989423][ T5009] loop7: detected capacity change from 0 to 128 [ 596.990464][ T5004] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 597.035984][ T5009] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.101814][T32075] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.156219][ T5043] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 597.267815][ T5051] __nla_validate_parse: 4 callbacks suppressed [ 597.267831][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17624'. [ 597.371011][ T5051] 8021q: adding VLAN 0 to HW filter on device team1 [ 597.940904][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17639'. [ 598.026566][ T5132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17642'. [ 598.382758][ T5159] xt_hashlimit: max too large, truncated to 1048576 [ 598.526477][ T5171] netlink: 1 bytes leftover after parsing attributes in process `syz.1.17649'. [ 598.915812][T16019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=16019 comm=kworker/0:15 [ 598.947297][ T5212] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 599.104425][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17670'. [ 599.115934][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.124470][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.193265][ T5248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17673'. [ 599.784045][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 599.784064][ T29] audit: type=1400 audit(2142.887:17582): avc: denied { unmount } for pid=5298 comm="syz.1.17689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 599.830456][ T5302] loop7: detected capacity change from 0 to 2048 [ 599.875986][ T5302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.911424][ T5302] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 599.928702][ T5302] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 599.941595][ T5302] EXT4-fs (loop7): This should not happen!! Data will be lost [ 599.941595][ T5302] [ 599.951695][ T5302] EXT4-fs (loop7): Total free blocks count 0 [ 599.957796][ T5302] EXT4-fs (loop7): Free/Dirty block details [ 599.963891][ T5302] EXT4-fs (loop7): free_blocks=4096 [ 599.969202][ T5302] EXT4-fs (loop7): dirty_blocks=48 [ 599.974407][ T5302] EXT4-fs (loop7): Block reservation details [ 599.980433][ T5302] EXT4-fs (loop7): i_reserved_data_blocks=17 [ 600.019877][ T5318] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 769 with error 28 [ 600.056753][ T29] audit: type=1326 audit(2143.160:17583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.136002][ T29] audit: type=1326 audit(2143.160:17584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.159306][ T29] audit: type=1326 audit(2143.160:17585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.183032][ T29] audit: type=1326 audit(2143.160:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.206238][ T29] audit: type=1326 audit(2143.160:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.229539][ T29] audit: type=1326 audit(2143.160:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.252782][ T29] audit: type=1326 audit(2143.160:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.275879][ T29] audit: type=1326 audit(2143.160:17590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.299103][ T29] audit: type=1326 audit(2143.160:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.4.17697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 600.475304][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17712'. [ 600.643333][ T5381] loop7: detected capacity change from 0 to 256 [ 600.675920][ T5381] FAT-fs (loop7): Directory bread(block 64) failed [ 600.687718][ T5381] FAT-fs (loop7): Directory bread(block 65) failed [ 600.706251][ T5381] FAT-fs (loop7): Directory bread(block 66) failed [ 600.713118][ T5381] FAT-fs (loop7): Directory bread(block 67) failed [ 600.759039][ T5381] FAT-fs (loop7): Directory bread(block 68) failed [ 600.766410][ T5381] FAT-fs (loop7): Directory bread(block 69) failed [ 600.776647][ T5381] FAT-fs (loop7): Directory bread(block 70) failed [ 600.783609][ T5381] FAT-fs (loop7): Directory bread(block 71) failed [ 600.790450][ T5381] FAT-fs (loop7): Directory bread(block 72) failed [ 600.808672][ T5381] FAT-fs (loop7): Directory bread(block 73) failed [ 601.102377][ T5455] syz.4.17747: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 601.117212][ T5455] CPU: 1 UID: 0 PID: 5455 Comm: syz.4.17747 Tainted: G W 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 601.117263][ T5455] Tainted: [W]=WARN [ 601.117272][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.117290][ T5455] Call Trace: [ 601.117300][ T5455] [ 601.117312][ T5455] __dump_stack+0x1d/0x30 [ 601.117377][ T5455] dump_stack_lvl+0xe8/0x140 [ 601.117399][ T5455] dump_stack+0x15/0x1b [ 601.117421][ T5455] warn_alloc+0x12b/0x1a0 [ 601.117519][ T5455] __vmalloc_node_range_noprof+0x9c/0xe00 [ 601.117595][ T5455] ? __futex_wait+0x1ff/0x260 [ 601.117700][ T5455] ? __pfx_futex_wake_mark+0x10/0x10 [ 601.117743][ T5455] ? __rcu_read_unlock+0x4f/0x70 [ 601.117773][ T5455] ? avc_has_perm_noaudit+0x1b1/0x200 [ 601.117861][ T5455] ? should_fail_ex+0x30/0x280 [ 601.117955][ T5455] ? xskq_create+0x36/0xe0 [ 601.117991][ T5455] vmalloc_user_noprof+0x7d/0xb0 [ 601.118112][ T5455] ? xskq_create+0x80/0xe0 [ 601.118141][ T5455] xskq_create+0x80/0xe0 [ 601.118165][ T5455] xsk_init_queue+0x95/0xf0 [ 601.118186][ T5455] xsk_setsockopt+0x3de/0x510 [ 601.118269][ T5455] ? __pfx_xsk_setsockopt+0x10/0x10 [ 601.118297][ T5455] __sys_setsockopt+0x181/0x200 [ 601.118456][ T5455] __x64_sys_setsockopt+0x64/0x80 [ 601.118502][ T5455] x64_sys_call+0x2bd5/0x2fb0 [ 601.118545][ T5455] do_syscall_64+0xd2/0x200 [ 601.118570][ T5455] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 601.118637][ T5455] ? clear_bhb_loop+0x40/0x90 [ 601.118744][ T5455] ? clear_bhb_loop+0x40/0x90 [ 601.118776][ T5455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.118803][ T5455] RIP: 0033:0x7f16157ee929 [ 601.118824][ T5455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.118849][ T5455] RSP: 002b:00007f1613e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.119007][ T5455] RAX: ffffffffffffffda RBX: 00007f1615a15fa0 RCX: 00007f16157ee929 [ 601.119026][ T5455] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 601.119039][ T5455] RBP: 00007f1615870b39 R08: 0000000000000004 R09: 0000000000000000 [ 601.119082][ T5455] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 601.119099][ T5455] R13: 0000000000000000 R14: 00007f1615a15fa0 R15: 00007ffeabe40548 [ 601.119194][ T5455] [ 601.119203][ T5455] Mem-Info: [ 601.355591][ T5455] active_anon:3385 inactive_anon:15 isolated_anon:0 [ 601.355591][ T5455] active_file:9396 inactive_file:15428 isolated_file:0 [ 601.355591][ T5455] unevictable:16343 dirty:266 writeback:0 [ 601.355591][ T5455] slab_reclaimable:3555 slab_unreclaimable:54128 [ 601.355591][ T5455] mapped:28720 shmem:243 pagetables:1204 [ 601.355591][ T5455] sec_pagetables:0 bounce:0 [ 601.355591][ T5455] kernel_misc_reclaimable:0 [ 601.355591][ T5455] free:1801050 free_pcp:21910 free_cma:0 [ 601.373374][ T5460] wg2: entered promiscuous mode [ 601.400949][ T5455] Node 0 active_anon:13656kB inactive_anon:60kB active_file:37584kB inactive_file:61712kB unevictable:65372kB isolated(anon):0kB isolated(file):0kB mapped:114880kB dirty:1064kB writeback:0kB shmem:972kB writeback_tmp:0kB kernel_stack:5744kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.401020][ T5455] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.401151][ T5455] lowmem_reserve[]: 0 2882 7860 7860 [ 601.401232][ T5455] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 601.401304][ T5455] lowmem_reserve[]: 0 0 4978 4978 [ 601.401389][ T5455] Node 0 Normal free:4241004kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13656kB inactive_anon:60kB active_file:37584kB inactive_file:61712kB unevictable:65372kB writepending:1064kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:83956kB local_pcp:38856kB free_cma:0kB [ 601.401656][ T5455] lowmem_reserve[]: 0 [ 601.406568][ T5460] wg2: entered allmulticast mode [ 601.435808][ T5455] 0 0 0 [ 601.435950][ T5455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 601.436153][ T5455] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 601.436385][ T5455] Node 0 Normal: 1953*4kB (UME) 399*8kB (UM) 215*16kB (UME) 700*32kB (UM) 801*64kB (UME) 670*128kB (UME) 579*256kB (UME) 424*512kB (UME) 345*1024kB (UME) 71*2048kB (UM) 782*4096kB (UM) = 4240940kB [ 601.598075][ T5455] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 601.607509][ T5455] 41444 total pagecache pages [ 601.612313][ T5455] 20 pages in swap cache [ 601.616585][ T5455] Free swap = 123840kB [ 601.620814][ T5455] Total swap = 124996kB [ 601.625254][ T5455] 2097051 pages RAM [ 601.629083][ T5455] 0 pages HighMem/MovableOnly [ 601.633801][ T5455] 80812 pages reserved [ 601.737613][ T5471] tipc: Failed to remove unknown binding: 66,1,1/0:3141155044/3141155046 [ 601.767475][ T5471] tipc: Failed to remove unknown binding: 66,1,1/0:3141155044/3141155046 [ 601.776097][ T5471] tipc: Failed to remove unknown binding: 66,1,1/0:3141155044/3141155046 [ 601.824235][ T5483] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 602.122592][ T5526] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 602.202616][ T5539] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 602.431289][ T5564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5564 comm=syz.0.17786 [ 602.680817][ T5608] loop7: detected capacity change from 0 to 512 [ 602.704123][ T5608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 602.728141][ T5608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.802260][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.992820][ T5649] loop7: detected capacity change from 0 to 164 [ 603.030078][ T5649] syz.7.17799: attempt to access beyond end of device [ 603.030078][ T5649] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 603.052646][ T5649] syz.7.17799: attempt to access beyond end of device [ 603.052646][ T5649] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 603.545212][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 603.552105][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 603.562403][ T5700] loop7: detected capacity change from 0 to 512 [ 603.570844][ T5700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 603.585338][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 603.604566][ T5705] macvlan2: entered promiscuous mode [ 603.609924][ T5705] macvlan2: entered allmulticast mode [ 603.649958][ T5705] bond0: entered promiscuous mode [ 603.655079][ T5705] bond_slave_0: entered promiscuous mode [ 603.660997][ T5705] bond_slave_1: entered promiscuous mode [ 603.670398][ T5700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 603.727508][ T5700] EXT4-fs (loop7): shut down requested (2) [ 603.734302][ T5705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 603.760627][ T5718] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 603.769331][ T5695] infiniband syz2: set active [ 603.774286][ T5695] infiniband syz2: added vxcan1 [ 603.801940][ T5705] bond0: left promiscuous mode [ 603.806309][ T5695] RDS/IB: syz2: added [ 603.806874][ T5705] bond_slave_0: left promiscuous mode [ 603.816517][ T5705] bond_slave_1: left promiscuous mode [ 603.837614][ T5695] smc: adding ib device syz2 with port count 1 [ 603.859464][ T5695] smc: ib device syz2 port 1 has pnetid [ 603.888005][T30127] vxcan1 speed is unknown, defaulting to 1000 [ 603.894168][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 603.904690][T30113] vxcan1 speed is unknown, defaulting to 1000 [ 604.060188][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.134154][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 604.147007][ T5762] ref_ctr_offset mismatch. inode: 0x70e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 604.158233][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.173800][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17832'. [ 604.182936][ T5765] netlink: 108 bytes leftover after parsing attributes in process `syz.8.17832'. [ 604.198300][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17832'. [ 604.210211][ T5765] netlink: 108 bytes leftover after parsing attributes in process `syz.8.17832'. [ 604.219506][ T5765] netlink: 84 bytes leftover after parsing attributes in process `syz.8.17832'. [ 604.262674][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.321884][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17835'. [ 604.384232][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.446832][ T5798] netlink: 'syz.1.17844': attribute type 10 has an invalid length. [ 604.454886][ T5798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17844'. [ 604.474769][ T5798] dummy0: entered promiscuous mode [ 604.492225][ T5805] macvlan2: entered promiscuous mode [ 604.498462][ T5805] macvlan2: entered allmulticast mode [ 604.507671][ T5805] bond0: entered promiscuous mode [ 604.513139][ T5805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.527140][ T5805] bond0: left promiscuous mode [ 604.542075][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.627200][ T5819] netlink: 96 bytes leftover after parsing attributes in process `syz.7.17852'. [ 604.637266][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.670812][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 604.670828][ T29] audit: type=1326 audit(2149.015:17746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.752540][ T29] audit: type=1326 audit(2149.047:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.776311][ T29] audit: type=1326 audit(2149.047:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.799509][ T29] audit: type=1326 audit(2149.047:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.823439][ T29] audit: type=1326 audit(2149.047:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.846525][ T29] audit: type=1326 audit(2149.047:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.870398][ T29] audit: type=1326 audit(2149.047:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.7.17854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2455e929 code=0x7ffc0000 [ 604.896118][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.976430][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 604.981526][ T29] audit: type=1326 audit(2149.257:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.1.17858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 605.006526][ T29] audit: type=1326 audit(2149.267:17754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.1.17858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e5d2e929 code=0x7ffc0000 [ 605.030397][ T29] audit: type=1400 audit(2149.330:17755): avc: denied { read } for pid=5846 comm="syz.7.17872" path="socket:[156285]" dev="sockfs" ino=156285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 605.079023][ T5695] vxcan1 speed is unknown, defaulting to 1000 [ 605.107194][ T5853] macvlan2: entered promiscuous mode [ 605.112578][ T5853] macvlan2: entered allmulticast mode [ 605.139292][ T5856] loop7: detected capacity change from 0 to 1024 [ 605.156223][ T5856] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 605.167277][ T5856] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 605.181327][ T5853] bond0: entered promiscuous mode [ 605.186413][ T5853] bond_slave_0: entered promiscuous mode [ 605.192248][ T5853] bond_slave_1: entered promiscuous mode [ 605.209808][ T5853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.229933][ T5853] bond0: left promiscuous mode [ 605.233672][ T5856] JBD2: no valid journal superblock found [ 605.234826][ T5853] bond_slave_0: left promiscuous mode [ 605.240568][ T5856] EXT4-fs (loop7): Could not load journal inode [ 605.252496][ T5853] bond_slave_1: left promiscuous mode [ 605.282632][ T5856] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 605.386985][ T5871] loop7: detected capacity change from 0 to 512 [ 605.416477][ T5871] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 605.462978][ T5871] EXT4-fs (loop7): 1 truncate cleaned up [ 605.469260][ T5871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.578642][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.654249][ T5886] tipc: Enabled bearer , priority 22 [ 606.541259][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17905'. [ 606.615314][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17907'. [ 606.986091][ T5989] macvlan2: entered promiscuous mode [ 606.991535][ T5989] macvlan2: entered allmulticast mode [ 606.997687][ T5989] bond0: entered promiscuous mode [ 607.002872][ T5989] bond_slave_0: entered promiscuous mode [ 607.004160][ T5993] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 607.009089][ T5989] bond_slave_1: entered promiscuous mode [ 607.025060][ T5989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 607.033877][ T5989] bond0: left promiscuous mode [ 607.038899][ T5989] bond_slave_0: left promiscuous mode [ 607.044499][ T5989] bond_slave_1: left promiscuous mode [ 607.358897][ T6034] loop7: detected capacity change from 0 to 1024 [ 607.384868][ T6034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.419230][ T6040] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 607.484828][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.494789][ T6045] netlink: 'syz.8.17924': attribute type 10 has an invalid length. [ 607.551295][ T6045] hsr_slave_0: left promiscuous mode [ 607.567287][ T6045] hsr_slave_1: left promiscuous mode [ 607.686515][ T6072] vlan2: entered allmulticast mode [ 607.826107][ T6091] IPVS: stopping master sync thread 6092 ... [ 607.826110][ T6092] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 608.002756][ T6089] wireguard0: entered promiscuous mode [ 608.013210][ T6089] wireguard0: entered allmulticast mode [ 608.197152][ T6118] loop7: detected capacity change from 0 to 1024 [ 608.217419][ T6118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.260211][ T6118] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.17958: Allocating blocks 449-513 which overlap fs metadata [ 608.329557][ T6117] EXT4-fs (loop7): pa ffff8881057e3460: logic 48, phys. 177, len 21 [ 608.337772][ T6117] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 608.430125][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.891423][ T6204] syz_tun: entered allmulticast mode [ 608.908549][ T6202] syz_tun: left allmulticast mode [ 609.137335][ T6218] __nla_validate_parse: 7 callbacks suppressed [ 609.137356][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17992'. [ 609.262687][ T6251] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.317070][ T6251] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.362817][ T6251] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.412883][ T6251] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.470608][ T6274] netlink: 'syz.0.18005': attribute type 10 has an invalid length. [ 609.500641][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.510756][ T6274] bridge_slave_1: left allmulticast mode [ 609.516552][ T6274] bridge_slave_1: left promiscuous mode [ 609.522316][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.536112][ T6274] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 609.555456][ T6251] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.574552][ T6251] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.604185][ T6251] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.627450][ T6293] vlan2: entered allmulticast mode [ 609.634904][ T6293] dummy0: entered allmulticast mode [ 609.661263][ T6251] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.754731][ T6280] vxcan1 speed is unknown, defaulting to 1000 [ 609.821618][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 609.821634][ T29] audit: type=1326 audit(2154.424:17834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 609.853721][ T29] audit: type=1326 audit(2154.456:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 609.879021][ T6308] rdma_op ffff888126ce9980 conn xmit_rdma 0000000000000000 [ 609.901418][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18014'. [ 609.938319][ T29] audit: type=1326 audit(2154.487:17836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 609.962053][ T29] audit: type=1326 audit(2154.487:17837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 609.985170][ T29] audit: type=1326 audit(2154.487:17838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.009164][ T29] audit: type=1326 audit(2154.487:17839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.032580][ T29] audit: type=1326 audit(2154.487:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.056445][ T29] audit: type=1326 audit(2154.487:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.080150][ T29] audit: type=1326 audit(2154.487:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.104163][ T29] audit: type=1326 audit(2154.487:17843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.4.18013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16157ee929 code=0x7ffc0000 [ 610.244755][ T6353] vxcan1 speed is unknown, defaulting to 1000 [ 610.275822][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18023'. [ 610.601014][ T51] dummy0: left allmulticast mode [ 610.638388][ T51] bridge0: port 1(dummy0) entered disabled state [ 610.782235][ T51] bond0 (unregistering): Released all slaves [ 610.800325][ T51] bond1 (unregistering): Released all slaves [ 610.816761][ T51] bond2 (unregistering): Released all slaves [ 611.060438][ T51] hsr_slave_0: left promiscuous mode [ 611.073859][ T51] hsr_slave_1: left promiscuous mode [ 611.277162][ T6425] netlink: 96 bytes leftover after parsing attributes in process `syz.7.18037'. [ 611.373990][ T6446] netlink: 92 bytes leftover after parsing attributes in process `syz.1.18045'. [ 611.441311][ T6438] vxcan1 speed is unknown, defaulting to 1000 [ 611.547132][ T6469] loop7: detected capacity change from 0 to 1024 [ 611.583758][ T6469] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 611.596586][ T6457] vxcan1 speed is unknown, defaulting to 1000 [ 611.602646][ T6469] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 611.614578][ T6469] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 611.631863][ T6469] JBD2: no valid journal superblock found [ 611.638334][ T6469] EXT4-fs (loop7): Could not load journal inode [ 612.384312][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18074'. [ 612.989529][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18090'. [ 613.019741][ T6596] netlink: 'syz.8.18090': attribute type 13 has an invalid length. [ 613.146669][ T6596] net_ratelimit: 85 callbacks suppressed [ 613.146749][ T6596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.361152][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18099'. [ 613.385170][ T4090] smc: removing ib device syz2 [ 613.397819][T16019] vxcan1 speed is unknown, defaulting to 1000 [ 613.404020][T16019] syz2: Port: 1 Link DOWN [ 613.420556][T30113] vxcan1 speed is unknown, defaulting to 1000 [ 613.961398][ T6640] ref_ctr_offset mismatch. inode: 0x9a7 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 613.988150][ T6644] loop7: detected capacity change from 0 to 512 [ 614.002235][ T6636] wireguard0: entered promiscuous mode [ 614.008659][ T6636] wireguard0: entered allmulticast mode [ 614.026123][ T6644] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 614.051868][ T6644] EXT4-fs (loop7): 1 truncate cleaned up [ 614.060736][ T6644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.146504][T32075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.242899][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18107'. [ 614.302567][ T6660] netlink: 'syz.0.18107': attribute type 13 has an invalid length. [ 614.396480][ T6660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.517102][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18118'. [ 614.637188][ T6702] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.689143][ T6702] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.772991][ T6702] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.848945][ T6702] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.911643][ T6702] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.925249][ T6702] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.937550][ T6702] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.952852][ T6702] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.088825][ T6744] syz.1.18134 (6744): attempted to duplicate a private mapping with mremap. This is not supported. [ 615.286920][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 615.286937][ T29] audit: type=1326 audit(2160.159:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.8.18144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9cfd6e929 code=0x0 [ 615.288747][ T6766] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.364133][ T6766] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.440909][ T6766] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.515201][ T6766] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.600038][ T6766] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.629798][ T6766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.654288][ T6766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.672507][ T6766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.849435][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18159'. [ 616.167392][ T6813] ================================================================== [ 616.175634][ T6813] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 616.184275][ T6813] [ 616.186628][ T6813] write to 0xffff888135184528 of 8 bytes by task 6810 on cpu 1: [ 616.194283][ T6813] shmem_file_splice_read+0x470/0x600 [ 616.199696][ T6813] splice_direct_to_actor+0x26c/0x680 [ 616.205206][ T6813] do_splice_direct+0xda/0x150 [ 616.210025][ T6813] do_sendfile+0x380/0x650 [ 616.214491][ T6813] __x64_sys_sendfile64+0x105/0x150 [ 616.219731][ T6813] x64_sys_call+0xb39/0x2fb0 [ 616.224358][ T6813] do_syscall_64+0xd2/0x200 [ 616.228897][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.234824][ T6813] [ 616.237354][ T6813] write to 0xffff888135184528 of 8 bytes by task 6813 on cpu 0: [ 616.245030][ T6813] shmem_file_splice_read+0x470/0x600 [ 616.250529][ T6813] splice_direct_to_actor+0x26c/0x680 [ 616.255930][ T6813] do_splice_direct+0xda/0x150 [ 616.260720][ T6813] do_sendfile+0x380/0x650 [ 616.265162][ T6813] __x64_sys_sendfile64+0x105/0x150 [ 616.270382][ T6813] x64_sys_call+0xb39/0x2fb0 [ 616.274993][ T6813] do_syscall_64+0xd2/0x200 [ 616.279515][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.285437][ T6813] [ 616.287774][ T6813] value changed: 0x00000000000055eb -> 0x00000000000055ef [ 616.294890][ T6813] [ 616.297221][ T6813] Reported by Kernel Concurrency Sanitizer on: [ 616.303397][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.1.18157 Tainted: G W 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 616.317493][ T6813] Tainted: [W]=WARN [ 616.321397][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.331468][ T6813] ==================================================================