last executing test programs: 5m52.247214325s ago: executing program 2 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 5m52.194459691s ago: executing program 2 (id=354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) 5m52.168585533s ago: executing program 2 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 5m52.129909647s ago: executing program 2 (id=356): signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m52.10066895s ago: executing program 2 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a706f6c69e3795f7372635f743a7330202f7573722f7362696e2f637570732d62726f777325642034"], 0x4e) 5m51.862387954s ago: executing program 2 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x3, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x2000001}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5m51.810973249s ago: executing program 32 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x3, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x2000001}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5m7.396229766s ago: executing program 3 (id=1459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0x1}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m7.180994777s ago: executing program 3 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5m7.180528167s ago: executing program 3 (id=1467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80}, 0x50) 5m7.1533559s ago: executing program 3 (id=1469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0xc3000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x9) 5m6.825495952s ago: executing program 3 (id=1471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r0, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x80) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 5m6.777443637s ago: executing program 3 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000001140)=[{}], 0x1, 0x8, 0x0, 0x0) 5m6.777308066s ago: executing program 33 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000001140)=[{}], 0x1, 0x8, 0x0, 0x0) 4m21.798321399s ago: executing program 1 (id=2459): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = fsmount(r0, 0x1, 0x1) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 4m21.772881452s ago: executing program 1 (id=2460): setresuid(0xee01, 0xee00, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb7e1, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 4m21.69693797s ago: executing program 1 (id=2463): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 4m20.77815053s ago: executing program 1 (id=2479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 4m20.700681517s ago: executing program 1 (id=2484): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) 4m20.622628085s ago: executing program 1 (id=2485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000020940)=""/4089, 0xfdc3, 0x0, 0x0}, &(0x7f0000000380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 4m20.622445095s ago: executing program 34 (id=2485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000020940)=""/4089, 0xfdc3, 0x0, 0x0}, &(0x7f0000000380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 3m51.606473765s ago: executing program 6 (id=3137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m51.558487159s ago: executing program 6 (id=3139): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 3m51.499739015s ago: executing program 6 (id=3143): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa96) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) accept(r0, 0x0, 0x0) 3m51.475907117s ago: executing program 6 (id=3145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) 3m51.430436352s ago: executing program 6 (id=3147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m50.806620513s ago: executing program 6 (id=3159): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 3m50.792395965s ago: executing program 35 (id=3159): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 2.112286632s ago: executing program 0 (id=8386): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 1.866672626s ago: executing program 0 (id=8387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) 1.691325673s ago: executing program 0 (id=8389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.673349185s ago: executing program 0 (id=8390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.557274566s ago: executing program 7 (id=8393): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10420, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x38, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.51675863s ago: executing program 5 (id=8394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.472747864s ago: executing program 7 (id=8396): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.454654487s ago: executing program 5 (id=8397): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.42220045s ago: executing program 7 (id=8398): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 1.392467353s ago: executing program 7 (id=8400): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x1, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.382480863s ago: executing program 4 (id=8401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x4661, 0x80, 0x1, 0x40288}, &(0x7f0000000680)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) 1.307814401s ago: executing program 5 (id=8403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) chroot(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pptp(0x18, 0x1, 0x2) socket$kcm(0x29, 0x5, 0x0) 1.230981288s ago: executing program 4 (id=8404): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.226913479s ago: executing program 5 (id=8405): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.207635321s ago: executing program 4 (id=8406): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1239, &(0x7f0000000380)={0x0, 0x3c3, 0x80, 0x1, 0x2bc}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='fib_table_lookup\x00', r5}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.072096494s ago: executing program 7 (id=8409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.063029145s ago: executing program 8 (id=8410): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.01099272s ago: executing program 8 (id=8411): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 982.852863ms ago: executing program 8 (id=8412): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30000000001400000011000100"], 0x118}}, 0x0) 948.512206ms ago: executing program 8 (id=8413): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendto(r2, 0x0, 0x6000, 0x4008044, 0x0, 0x0) 898.343281ms ago: executing program 4 (id=8414): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 897.732921ms ago: executing program 8 (id=8415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 895.846192ms ago: executing program 4 (id=8416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) chroot(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pptp(0x18, 0x1, 0x2) socket$kcm(0x29, 0x5, 0x0) 869.111174ms ago: executing program 4 (id=8417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x98, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xfffffffd}, 0x0, 0x0) 690.924582ms ago: executing program 7 (id=8418): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 528.207898ms ago: executing program 0 (id=8419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x100000000000000, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 361.386084ms ago: executing program 5 (id=8420): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) brk(0x800000000000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 78.138912ms ago: executing program 5 (id=8421): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x430, 0x3f3, 0x100, 0x70bd25, 0x25dfdbff, {0x3, 0x1, 0x3a, [0x2, 0x3, 0x8, 0x2, 0x8, 0x2, 0x5, 0x10000, 0x94b, 0xb, 0x2, 0x8, 0x100, 0x6, 0xfee, 0xfffff77c, 0xfffffffa, 0xfff, 0x8, 0x0, 0x2, 0x9c, 0x8, 0x6, 0x4, 0x2, 0x11, 0x6, 0x8, 0x80, 0x80000001, 0x7fffffff, 0x5, 0x6, 0x81, 0xa, 0xfffffffc, 0x9, 0x5, 0x3, 0x80, 0x8, 0xe, 0xb, 0x3bb, 0x80000000, 0xe, 0x5, 0x3, 0x0, 0x9, 0x3, 0x7, 0x0, 0x1, 0x8, 0x0, 0x7, 0x8, 0x4, 0x8, 0x1, 0x1, 0xfffffc00], [0x3ff, 0x10, 0x3, 0x7fff, 0x6, 0x8, 0x80000001, 0xfff, 0x8000, 0x2, 0x52, 0x2cfe, 0x3, 0x0, 0x34, 0x4, 0xfffffff7, 0x7819, 0x4, 0x9, 0x0, 0xafa, 0x7, 0x9, 0x8, 0xd, 0x0, 0x40, 0x61, 0x4, 0x9, 0x9, 0xfb, 0xc2, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0x30, 0x7fff, 0xb9b, 0x1, 0xcf3, 0x7, 0x7ff, 0x5, 0x8, 0x1, 0x32, 0x80000000, 0x6, 0x2, 0x1, 0x80000001, 0x3d, 0xffff, 0x2, 0x2, 0x7, 0x101, 0xffff, 0x6, 0x6], [0x80000001, 0x80000001, 0x5c92c397, 0xd, 0x4, 0xffffffff, 0x9, 0x5, 0x80, 0x5, 0x1, 0xf4f3, 0x400, 0x5, 0x3, 0x6, 0x5, 0x2, 0x9, 0x0, 0xf, 0x7ff, 0x9, 0x80000001, 0x5, 0x8, 0x7db5, 0x8, 0xe, 0x5, 0x7, 0x924, 0x0, 0x4, 0x80, 0x9, 0xea, 0xd, 0x556c, 0xfffffffa, 0xffffff7f, 0xffffffff, 0x6837, 0x1, 0x1ac, 0x8, 0x8000, 0x3, 0x3, 0x9, 0x6, 0x53, 0x4, 0x0, 0x6, 0x7, 0x4, 0x3, 0x6, 0x7, 0x100, 0x4, 0x0, 0x6], [0x9, 0x3, 0x8, 0x4, 0x4, 0xfffffff7, 0x7, 0xffff, 0x9, 0x3, 0x5, 0x1, 0xfffffff4, 0x1b02, 0x8, 0xaca, 0x30700000, 0x3, 0x6000, 0x200000, 0xffffffff, 0x9, 0x80000000, 0x915, 0x2, 0x9, 0x1, 0x57, 0x2, 0x6829f12c, 0x8, 0x3, 0x83, 0x35, 0xfffffffd, 0xe5d, 0x8, 0xff, 0x8, 0x4, 0x400, 0x2, 0xa, 0x1, 0x1, 0xa, 0x7, 0x6, 0x6, 0x7, 0x4, 0x6, 0x6082, 0xff, 0x6, 0x6, 0x5, 0x48163d1, 0x9, 0x2, 0x10001, 0x6, 0x9, 0x1], 0x10, ['sched_switch\x00', '\x00', '$\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 2.283079ms ago: executing program 8 (id=8422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000240)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "f1a1173fb9462df9f6a31854ec01e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad49300", 0x35}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 0s ago: executing program 0 (id=8423): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='writeback_bdi_register\x00', r0}, 0x18) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.5.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 310.249971][ T29] audit: type=1326 audit(2000000691.278:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.5.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 310.273652][ T29] audit: type=1326 audit(2000000691.278:10401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.5.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43d6def003 code=0x7ffc0000 [ 310.297182][ T29] audit: type=1326 audit(2000000691.278:10402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.5.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43d6deda7f code=0x7ffc0000 [ 310.320747][ T29] audit: type=1326 audit(2000000691.278:10403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.5.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f43d6def057 code=0x7ffc0000 [ 310.445893][T19557] netlink: 'syz.7.6321': attribute type 30 has an invalid length. [ 310.480610][T19560] netlink: 'syz.5.6322': attribute type 1 has an invalid length. [ 310.488581][T19560] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.6322'. [ 310.854154][T19593] vlan2: entered allmulticast mode [ 310.882024][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6335'. [ 311.011878][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6341'. [ 311.021188][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6341'. [ 311.031634][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6341'. [ 311.054154][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6341'. [ 311.291759][T19623] netlink: 'syz.5.6346': attribute type 2 has an invalid length. [ 311.378331][T19642] xt_hashlimit: max too large, truncated to 1048576 [ 311.409254][T19645] vlan0: entered allmulticast mode [ 312.065647][T19670] Set syz1 is full, maxelem 65536 reached [ 312.138523][T19699] netlink: 'syz.0.6378': attribute type 1 has an invalid length. [ 312.153330][T19699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.165404][T19699] bond1 (unregistering): Released all slaves [ 312.221006][T19710] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.268336][T19710] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.415664][T19710] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.467964][T19710] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.534627][ T8014] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.547168][ T8014] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.558492][ T8014] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.570955][ T8014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.026116][T19706] 9pnet_fd: p9_fd_create_tcp (19706): problem connecting socket to 127.0.0.1 [ 313.112317][T19740] loop8: detected capacity change from 0 to 1024 [ 313.134665][T19740] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 313.175854][T19740] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.187032][T19740] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.198320][T19740] JBD2: no valid journal superblock found [ 313.204115][T19740] EXT4-fs (loop8): Could not load journal inode [ 314.741236][T19781] __nla_validate_parse: 29 callbacks suppressed [ 314.741259][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 314.756608][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 314.786539][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 314.849912][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 314.859102][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 314.876461][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 315.127991][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 315.137096][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 315.196070][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6409'. [ 315.753642][T19843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6431'. [ 316.049864][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 316.049884][ T29] audit: type=1326 audit(2000000697.208:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.079882][ T29] audit: type=1326 audit(2000000697.208:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.167989][ T29] audit: type=1326 audit(2000000697.268:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.191854][ T29] audit: type=1326 audit(2000000697.268:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.216640][ T29] audit: type=1326 audit(2000000697.268:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.240338][ T29] audit: type=1326 audit(2000000697.268:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.264148][ T29] audit: type=1326 audit(2000000697.268:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.288127][ T29] audit: type=1326 audit(2000000697.268:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.311966][ T29] audit: type=1326 audit(2000000697.268:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.335884][ T29] audit: type=1326 audit(2000000697.268:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.4.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 316.481995][T19864] vlan2: entered allmulticast mode [ 317.071365][T19895] tipc: Started in network mode [ 317.076482][T19895] tipc: Node identity ac14140f, cluster identity 4711 [ 317.083800][T19895] tipc: New replicast peer: 255.255.255.255 [ 317.090091][T19895] tipc: Enabled bearer , priority 10 [ 317.216634][T19905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19905 comm=syz.8.6457 [ 317.515026][T19929] tipc: Enabling of bearer rejected, failed to enable media [ 317.550908][T19933] netlink: 'gtp': attribute type 1 has an invalid length. [ 317.568735][T19933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.607583][T19933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.615057][T19933] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.630315][T19933] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 317.706952][T19945] vlan2: entered allmulticast mode [ 317.868355][T19960] tipc: Enabling of bearer rejected, failed to enable media [ 317.914626][T19969] wireguard0: entered promiscuous mode [ 317.920240][T19969] wireguard0: entered allmulticast mode [ 317.971497][T19976] vlan0: entered allmulticast mode [ 317.983354][T19976] dummy0: entered allmulticast mode [ 318.030082][T19988] vlan3: entered allmulticast mode [ 318.042360][T19988] dummy0: entered allmulticast mode [ 318.086608][T17484] tipc: Node number set to 2886997007 [ 318.165921][T20002] wg2: entered promiscuous mode [ 318.170910][T20002] wg2: entered allmulticast mode [ 319.037870][T19998] syz.7.6497 (19998) used greatest stack depth: 6072 bytes left [ 320.300072][T20148] cgroup: Unknown subsys name 'cpuset' [ 320.778065][T20175] __nla_validate_parse: 6 callbacks suppressed [ 320.778080][T20175] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6572'. [ 320.832807][T20179] ref_ctr increment failed for inode: 0x1320 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811e60e780 [ 321.161763][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 321.161866][ T29] audit: type=1326 audit(2000000702.318:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.198501][ T29] audit: type=1326 audit(2000000702.348:10723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.222777][ T29] audit: type=1326 audit(2000000702.348:10724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.246697][ T29] audit: type=1326 audit(2000000702.348:10725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.270540][ T29] audit: type=1326 audit(2000000702.348:10726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.294341][ T29] audit: type=1326 audit(2000000702.348:10727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.318596][ T29] audit: type=1326 audit(2000000702.358:10728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.342444][ T29] audit: type=1326 audit(2000000702.358:10729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.366464][ T29] audit: type=1326 audit(2000000702.358:10730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.390206][ T29] audit: type=1326 audit(2000000702.358:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.7.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 321.505389][T20210] loop8: detected capacity change from 0 to 1024 [ 321.513550][T20210] EXT4-fs: Ignoring removed orlov option [ 321.540018][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6587'. [ 321.554060][T20210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.840817][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.255254][T20275] pimreg: entered allmulticast mode [ 322.266060][T20275] pimreg: left allmulticast mode [ 322.953433][T20315] netlink: 'gtp': attribute type 1 has an invalid length. [ 323.029415][T20315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.052552][T20322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.062056][T20322] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 323.074092][T20322] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 323.947957][T20357] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 324.667459][T20369] Set syz1 is full, maxelem 65536 reached [ 324.921292][T20409] IPv6: Can't replace route, no match found [ 325.010552][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6676'. [ 325.682886][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6683'. [ 325.691892][T20447] netlink: 348 bytes leftover after parsing attributes in process `syz.8.6683'. [ 325.701096][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6683'. [ 325.710044][T20447] netlink: 348 bytes leftover after parsing attributes in process `syz.8.6683'. [ 325.719992][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6683'. [ 325.856052][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6689'. [ 325.870862][T20460] macvlan0 (unregistering): left allmulticast mode [ 325.940678][T20463] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.018704][T20463] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.070095][T20463] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.121583][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6696'. [ 326.158772][T20463] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.188003][T20481] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6697'. [ 326.234540][ T8022] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.250380][ T8022] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.263537][ T8022] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.282749][ T8022] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.296761][T20488] pimreg: entered allmulticast mode [ 326.307222][T20488] pimreg: left allmulticast mode [ 326.335654][T20490] 9pnet_fd: Insufficient options for proto=fd [ 326.367081][T20492] netlink: 'syz.0.6702': attribute type 12 has an invalid length. [ 326.845725][T20520] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.918930][T20520] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.947934][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6709'. [ 326.977645][T20520] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.989336][T20527] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6715'. [ 327.030344][T20520] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.049803][T20529] netlink: 'syz.0.6716': attribute type 1 has an invalid length. [ 327.092765][ T7964] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.104362][T20529] macvlan2: entered promiscuous mode [ 327.109886][T20529] macvlan2: entered allmulticast mode [ 327.116231][T20529] bond1: entered promiscuous mode [ 327.122616][T20529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.131747][T20529] bond1: left promiscuous mode [ 327.144753][ T8022] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.157248][ T7975] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.169667][ T8022] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.387594][T20542] loop8: detected capacity change from 0 to 2048 [ 327.420585][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 327.420603][ T29] audit: type=1326 audit(2000000708.578:10900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.7.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 327.456979][ T29] audit: type=1326 audit(2000000708.578:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.7.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 327.472070][T20542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.480789][ T29] audit: type=1326 audit(2000000708.578:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.7.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 327.480822][ T29] audit: type=1326 audit(2000000708.578:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.7.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 327.595632][ T29] audit: type=1400 audit(2000000708.748:10904): avc: denied { mounton } for pid=20541 comm="syz.8.6722" path="/172/file0/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 327.632294][ T29] audit: type=1400 audit(2000000708.788:10905): avc: denied { rmdir } for pid=18167 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.656735][T18167] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 327.672154][T18167] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 327.684101][ T29] audit: type=1400 audit(2000000708.848:10906): avc: denied { unlink } for pid=18167 comm="syz-executor" name="file1" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 327.710269][ T29] audit: type=1400 audit(2000000708.868:10907): avc: denied { unmount } for pid=18167 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 327.732857][ T29] audit: type=1400 audit(2000000708.898:10908): avc: denied { unlink } for pid=18167 comm="syz-executor" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 327.737357][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.035336][ T29] audit: type=1400 audit(2000000709.188:10909): avc: denied { add_name } for pid=20575 comm="GPL" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 328.084989][T20581] syz.5.6738: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 328.099734][T20581] CPU: 0 UID: 0 PID: 20581 Comm: syz.5.6738 Not tainted syzkaller #0 PREEMPT(voluntary) [ 328.099828][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.099902][T20581] Call Trace: [ 328.099910][T20581] [ 328.099921][T20581] __dump_stack+0x1d/0x30 [ 328.099948][T20581] dump_stack_lvl+0xe8/0x140 [ 328.099975][T20581] dump_stack+0x15/0x1b [ 328.100072][T20581] warn_alloc+0x12b/0x1a0 [ 328.100122][T20581] __vmalloc_node_range_noprof+0x9d/0xed0 [ 328.100215][T20581] ? probe_sched_wakeup+0x85/0xa0 [ 328.100314][T20581] ? ttwu_do_activate+0x1d0/0x210 [ 328.100341][T20581] ? __rcu_read_unlock+0x4f/0x70 [ 328.100433][T20581] ? avc_has_perm_noaudit+0x1b1/0x200 [ 328.100469][T20581] ? should_fail_ex+0x30/0x280 [ 328.100512][T20581] ? xskq_create+0x36/0xe0 [ 328.100575][T20581] vmalloc_user_noprof+0x7d/0xb0 [ 328.100627][T20581] ? xskq_create+0x80/0xe0 [ 328.100658][T20581] xskq_create+0x80/0xe0 [ 328.100760][T20581] xsk_init_queue+0x95/0xf0 [ 328.100797][T20581] xsk_setsockopt+0x3f5/0x640 [ 328.100826][T20581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.100854][T20581] __sys_setsockopt+0x184/0x200 [ 328.100928][T20581] __x64_sys_setsockopt+0x64/0x80 [ 328.100959][T20581] x64_sys_call+0x20ec/0x3000 [ 328.101062][T20581] do_syscall_64+0xd2/0x200 [ 328.101158][T20581] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 328.101187][T20581] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 328.101219][T20581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.101258][T20581] RIP: 0033:0x7f43d6deefc9 [ 328.101275][T20581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.101293][T20581] RSP: 002b:00007f43d5857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.101314][T20581] RAX: ffffffffffffffda RBX: 00007f43d7045fa0 RCX: 00007f43d6deefc9 [ 328.101328][T20581] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 328.101343][T20581] RBP: 00007f43d6e71f91 R08: 0000000000000004 R09: 0000000000000000 [ 328.101423][T20581] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.101436][T20581] R13: 00007f43d7046038 R14: 00007f43d7045fa0 R15: 00007fffa12ce278 [ 328.101457][T20581] [ 328.101464][T20581] Mem-Info: [ 328.326413][T20581] active_anon:41163 inactive_anon:11253 isolated_anon:0 [ 328.326413][T20581] active_file:20322 inactive_file:5501 isolated_file:0 [ 328.326413][T20581] unevictable:16875 dirty:315 writeback:0 [ 328.326413][T20581] slab_reclaimable:4219 slab_unreclaimable:122114 [ 328.326413][T20581] mapped:31771 shmem:48086 pagetables:1579 [ 328.326413][T20581] sec_pagetables:0 bounce:0 [ 328.326413][T20581] kernel_misc_reclaimable:0 [ 328.326413][T20581] free:1670446 free_pcp:34442 free_cma:0 [ 328.373205][T20581] Node 0 active_anon:164652kB inactive_anon:45012kB active_file:81288kB inactive_file:22004kB unevictable:67500kB isolated(anon):0kB isolated(file):0kB mapped:127084kB dirty:1260kB writeback:0kB shmem:192344kB kernel_stack:5584kB pagetables:6316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.402215][T20581] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.432025][T20581] lowmem_reserve[]: 0 2883 7862 7862 [ 328.437462][T20581] Node 0 DMA32 free:2949144kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952676kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 328.468952][T20581] lowmem_reserve[]: 0 0 4978 4978 [ 328.474154][T20581] Node 0 Normal free:3717280kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:164652kB inactive_anon:45012kB active_file:81288kB inactive_file:22004kB unevictable:67500kB writepending:1260kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:134236kB local_pcp:76492kB free_cma:0kB [ 328.508178][T20581] lowmem_reserve[]: 0 0 0 0 [ 328.512733][T20581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.525540][T20581] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949144kB [ 328.541895][T20581] Node 0 Normal: 1172*4kB (UME) 688*8kB (UE) 307*16kB (UME) 685*32kB (UME) 92*64kB (UE) 230*128kB (UME) 282*256kB (UME) 210*512kB (UME) 104*1024kB (UM) 44*2048kB (UME) 798*4096kB (UM) = 3717280kB [ 328.561351][T20581] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 328.570699][T20581] 90805 total pagecache pages [ 328.575522][T20581] 29 pages in swap cache [ 328.579926][T20581] Free swap = 34228kB [ 328.583994][T20581] Total swap = 124996kB [ 328.588253][T20581] 2097051 pages RAM [ 328.592065][T20581] 0 pages HighMem/MovableOnly [ 328.596772][T20581] 80482 pages reserved [ 328.721526][T20590] siw: device registration error -23 [ 328.798343][T20604] netlink: 'syz.4.6747': attribute type 1 has an invalid length. [ 328.813507][T20604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.826619][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6747'. [ 328.841027][T20604] bond5 (unregistering): Released all slaves [ 328.896523][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6749'. [ 328.910698][T20610] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6749'. [ 328.968151][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6754'. [ 329.356936][ T7964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.370912][ T783] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.389426][ T783] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.408095][ T783] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.631709][T20677] bridge: RTM_NEWNEIGH with invalid ether address [ 329.726929][T20685] loop8: detected capacity change from 0 to 128 [ 329.875729][T20679] syz.8.6781: attempt to access beyond end of device [ 329.875729][T20679] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 329.949426][T20679] syz.8.6781: attempt to access beyond end of device [ 329.949426][T20679] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 329.978188][T20679] syz.8.6781: attempt to access beyond end of device [ 329.978188][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.993010][T20679] syz.8.6781: attempt to access beyond end of device [ 329.993010][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.006417][T20679] syz.8.6781: attempt to access beyond end of device [ 330.006417][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.019730][T20679] syz.8.6781: attempt to access beyond end of device [ 330.019730][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.033066][T20679] syz.8.6781: attempt to access beyond end of device [ 330.033066][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.046330][T20679] syz.8.6781: attempt to access beyond end of device [ 330.046330][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.060012][T20679] syz.8.6781: attempt to access beyond end of device [ 330.060012][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.073385][T20679] syz.8.6781: attempt to access beyond end of device [ 330.073385][T20679] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.514046][T20707] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.6792'. [ 330.555950][T20709] 0ªî{X¹¦: entered promiscuous mode [ 330.561638][T20709] macsec1: entered promiscuous mode [ 330.567062][T20709] macsec1: entered allmulticast mode [ 330.587278][T20709] 0ªî{X¹¦: left promiscuous mode [ 331.243766][T20749] __nla_validate_parse: 2 callbacks suppressed [ 331.243787][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6811'. [ 331.279296][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6811'. [ 331.342007][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6811'. [ 331.376758][T20753] vlan0: entered allmulticast mode [ 331.524184][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6818'. [ 331.911144][T20813] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.932832][T20819] sg_write: data in/out 124/1 bytes for SCSI command 0xdf-- guessing data in; [ 331.932832][T20819] program syz.8.6828 not setting count and/or reply_len properly [ 332.022332][T20813] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.068198][T20813] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.117660][T20813] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.175908][ T7975] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.197153][ T7975] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.211144][ T7975] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.219616][ T7975] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.428407][ T29] kauditd_printk_skb: 1060 callbacks suppressed [ 332.428426][ T29] audit: type=1326 audit(2000000713.588:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f769fde5e67 code=0x7ffc0000 [ 332.459715][ T29] audit: type=1326 audit(2000000713.588:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f769fd8b099 code=0x7ffc0000 [ 332.483352][ T29] audit: type=1326 audit(2000000713.588:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 332.507037][ T29] audit: type=1326 audit(2000000713.618:11973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f769fde5e67 code=0x7ffc0000 [ 332.530754][ T29] audit: type=1326 audit(2000000713.618:11974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f769fd8b099 code=0x7ffc0000 [ 332.554376][ T29] audit: type=1326 audit(2000000713.618:11975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 332.578526][ T29] audit: type=1326 audit(2000000713.618:11976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f769fde5e67 code=0x7ffc0000 [ 332.602084][ T29] audit: type=1326 audit(2000000713.618:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f769fd8b099 code=0x7ffc0000 [ 332.625912][ T29] audit: type=1326 audit(2000000713.618:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 332.628618][T20888] loop8: detected capacity change from 0 to 512 [ 332.649567][ T29] audit: type=1326 audit(2000000713.618:11979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20798 comm="syz.0.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f769fde5e67 code=0x7ffc0000 [ 332.688829][T20888] EXT4-fs: Ignoring removed nobh option [ 332.694567][T20888] ext4: Unknown parameter 'noacl' [ 333.086476][T20965] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.168849][T20965] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.227086][T20965] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.255761][T20981] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.298363][T20965] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.344238][ T8022] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.356688][ T8022] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.368492][ T8022] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.380670][ T8022] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.722179][T21012] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.778267][T21012] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.831007][T21012] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.878249][T21012] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.934416][ T783] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.946725][ T7964] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.958542][ T783] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.970685][ T783] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.267263][T21042] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6879'. [ 334.680098][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6888'. [ 334.689263][T21060] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6888'. [ 334.715144][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6888'. [ 334.741801][T21060] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6888'. [ 334.751124][T21060] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6888'. [ 334.834352][T21058] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 334.924276][T21080] geneve2: entered promiscuous mode [ 334.929658][T21080] geneve2: entered allmulticast mode [ 335.228680][T21101] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 337.258996][T21239] __nla_validate_parse: 2 callbacks suppressed [ 337.259016][T21239] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6965'. [ 337.446141][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 337.446162][ T29] audit: type=1326 audit(2000000718.598:12512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.477092][ T29] audit: type=1326 audit(2000000718.638:12513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.500949][ T29] audit: type=1326 audit(2000000718.668:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.526213][ T29] audit: type=1326 audit(2000000718.678:12515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.550638][ T29] audit: type=1326 audit(2000000718.708:12516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.575746][ T29] audit: type=1326 audit(2000000718.728:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.599704][ T29] audit: type=1326 audit(2000000718.758:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 337.624147][ T29] audit: type=1326 audit(2000000718.778:12519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21253 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 337.648260][ T29] audit: type=1326 audit(2000000718.778:12520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21253 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 337.672229][ T29] audit: type=1326 audit(2000000718.778:12521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21253 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 337.934109][T21261] bridge0: entered promiscuous mode [ 337.945704][T21261] macsec1: entered promiscuous mode [ 337.962064][T21261] bridge0: port 1(macsec1) entered blocking state [ 337.968852][T21261] bridge0: port 1(macsec1) entered disabled state [ 337.980040][T21261] macsec1: entered allmulticast mode [ 337.985423][T21261] bridge0: entered allmulticast mode [ 337.996811][T21261] macsec1: left allmulticast mode [ 338.002102][T21261] bridge0: left allmulticast mode [ 338.023284][T21261] bridge0: left promiscuous mode [ 338.169766][T21268] tipc: Enabling of bearer rejected, failed to enable media [ 338.199144][T21256] Set syz1 is full, maxelem 65536 reached [ 338.240128][T21272] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 338.571443][T21285] wg2: left promiscuous mode [ 338.576126][T21285] wg2: left allmulticast mode [ 338.886816][T21313] loop8: detected capacity change from 0 to 256 [ 338.922610][T21313] vfat: Deprecated parameter 'posix' [ 338.928063][T21313] FAT-fs: "posix" option is obsolete, not supported now [ 338.996643][T21329] tipc: Started in network mode [ 339.008767][T21329] tipc: Node identity ac14140f, cluster identity 4711 [ 339.019183][T21329] tipc: New replicast peer: 255.255.255.83 [ 339.025147][T21329] tipc: Enabled bearer , priority 10 [ 339.061801][T21335] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 339.070367][T21335] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 339.161146][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7017'. [ 340.136456][T14279] tipc: Node number set to 2886997007 [ 340.195952][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7046'. [ 340.283653][T21430] rdma_op ffff8881531ff580 conn xmit_rdma 0000000000000000 [ 340.485508][T14278] hid_parser_main: 18 callbacks suppressed [ 340.485532][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.499067][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.506571][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.518390][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.525849][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.533334][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.540853][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.548432][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.555952][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.563492][T14278] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.578624][T14278] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.04 Device [syz0] on syz0 [ 340.699301][T21476] wg2: entered promiscuous mode [ 340.704344][T21476] wg2: entered allmulticast mode [ 340.720113][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7073'. [ 340.785672][T21486] netlink: 'syz.0.7075': attribute type 1 has an invalid length. [ 340.793707][T21486] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.7075'. [ 341.728746][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7090'. [ 341.745679][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7091'. [ 341.859135][T21539] netlink: 'syz.8.7097': attribute type 13 has an invalid length. [ 341.867210][T21539] netlink: 'syz.8.7097': attribute type 27 has an invalid length. [ 342.096871][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.131467][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.233111][T21539] bond1: left allmulticast mode [ 342.238535][T21539] bond1: left promiscuous mode [ 342.269308][T21553] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.285246][ T783] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.298727][ T783] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.323795][ T783] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.332430][ T783] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.344347][T21553] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.379649][T21553] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.424312][T21557] loop8: detected capacity change from 0 to 4096 [ 342.434466][T21557] EXT4-fs: test_dummy_encryption option not supported [ 342.443283][T21553] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.519723][ T8022] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.528988][T21557] SELinux: failed to load policy [ 342.547516][ T8022] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.556018][ T8022] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.565158][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 342.565175][ T29] audit: type=1326 audit(2000000723.718:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.4.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 342.610505][ T8022] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.622220][ T29] audit: type=1326 audit(2000000723.718:13059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.4.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 342.645931][ T29] audit: type=1326 audit(2000000723.718:13060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.4.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 342.669637][ T29] audit: type=1326 audit(2000000723.728:13061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.4.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 342.804430][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7117'. [ 342.815769][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7117'. [ 342.837993][T21582] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7116'. [ 342.945425][T21593] vlan2: entered allmulticast mode [ 343.113820][T21598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7122'. [ 343.338888][ T29] audit: type=1326 audit(2000000724.488:13062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.362716][ T29] audit: type=1326 audit(2000000724.488:13063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.386474][ T29] audit: type=1326 audit(2000000724.488:13064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.410274][ T29] audit: type=1326 audit(2000000724.488:13065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.434015][ T29] audit: type=1326 audit(2000000724.488:13066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.457732][ T29] audit: type=1326 audit(2000000724.488:13067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.0.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 343.713978][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7129'. [ 343.727881][T21619] veth0: entered promiscuous mode [ 343.733407][T21619] veth0: left promiscuous mode [ 343.746975][T21621] netlink: 'syz.4.7131': attribute type 7 has an invalid length. [ 343.754883][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7131'. [ 343.778448][T21621] bridge4: port 1(bond5) entered blocking state [ 343.784804][T21621] bridge4: port 1(bond5) entered disabled state [ 343.791388][T21621] bond5: entered allmulticast mode [ 343.892130][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7135'. [ 344.154065][T21652] netlink: 'syz.8.7142': attribute type 1 has an invalid length. [ 344.178692][T21652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.211654][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7142'. [ 344.251906][T21652] bond4 (unregistering): Released all slaves [ 344.300637][T21668] pimreg: entered allmulticast mode [ 344.308741][T21668] pimreg: left allmulticast mode [ 344.554963][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7159'. [ 344.632356][T21697] bridge: RTM_NEWNEIGH with invalid ether address [ 344.701191][T21707] ÿÿÿÿÿÿ: renamed from vlan1 [ 345.199708][T21748] pimreg: entered allmulticast mode [ 345.207886][T21748] pimreg: left allmulticast mode [ 345.306246][T21752] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.358490][T21752] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.392712][T21760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7190'. [ 345.411612][T21752] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.430615][T21760] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 345.508465][T21752] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.604188][T21781] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 345.731884][T21789] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 345.813705][T21801] atomic_op ffff888134f72528 conn xmit_atomic 0000000000000000 [ 345.904456][T21815] GUP no longer grows the stack in syz.0.7216 (21815): 200000003000-20000000a000 (200000001000) [ 345.915016][T21815] CPU: 1 UID: 0 PID: 21815 Comm: syz.0.7216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.915124][T21815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.915185][T21815] Call Trace: [ 345.915192][T21815] [ 345.915201][T21815] __dump_stack+0x1d/0x30 [ 345.915274][T21815] dump_stack_lvl+0xe8/0x140 [ 345.915295][T21815] dump_stack+0x15/0x1b [ 345.915352][T21815] __get_user_pages+0x1968/0x1ed0 [ 345.915378][T21815] ? bpf_trace_run3+0x12c/0x1d0 [ 345.915435][T21815] ? __bpf_trace_mmap_lock_acquire_returned+0x28/0x40 [ 345.915471][T21815] __gup_longterm_locked+0x8ef/0xe60 [ 345.915517][T21815] ? __rcu_read_unlock+0x34/0x70 [ 345.915585][T21815] ? try_get_folio+0x379/0x3c0 [ 345.915629][T21815] ? try_grab_folio_fast+0xdc/0x370 [ 345.915658][T21815] gup_fast_fallback+0x1f5/0x1420 [ 345.915696][T21815] get_user_pages_fast+0x5f/0x90 [ 345.915722][T21815] __iov_iter_get_pages_alloc+0x250/0x730 [ 345.915758][T21815] ? __rcu_read_unlock+0x4f/0x70 [ 345.915786][T21815] iov_iter_get_pages2+0x5e/0xa0 [ 345.915814][T21815] __se_sys_vmsplice+0x4db/0xee0 [ 345.915862][T21815] __x64_sys_vmsplice+0x55/0x70 [ 345.915945][T21815] x64_sys_call+0x1dde/0x3000 [ 345.915968][T21815] do_syscall_64+0xd2/0x200 [ 345.915995][T21815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.916024][T21815] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 345.916069][T21815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.916092][T21815] RIP: 0033:0x7f769fdeefc9 [ 345.916109][T21815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.916129][T21815] RSP: 002b:00007f769e857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 345.916149][T21815] RAX: ffffffffffffffda RBX: 00007f76a0045fa0 RCX: 00007f769fdeefc9 [ 345.916218][T21815] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 345.916231][T21815] RBP: 00007f769fe71f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.916244][T21815] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 345.916256][T21815] R13: 00007f76a0046038 R14: 00007f76a0045fa0 R15: 00007ffce21f2f98 [ 345.916277][T21815] [ 346.389740][ T783] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.408756][ T783] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.421114][ T783] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.452350][ T783] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.657244][T21859] infiniband syz0: set down [ 346.661868][T21859] infiniband syz0: added bond_slave_0 [ 346.674199][T21859] RDS/IB: syz0: added [ 347.050704][T21884] team2: entered promiscuous mode [ 347.055847][T21884] team2: entered allmulticast mode [ 347.076090][T21884] 8021q: adding VLAN 0 to HW filter on device team2 [ 347.146709][T21887] netlink: 'syz.0.7244': attribute type 10 has an invalid length. [ 347.159656][T21887] bond0: (slave dummy0): Releasing backup interface [ 347.179177][T21887] team0: Device dummy0 is already a lower device of the team interface [ 347.207021][T21887] netlink: 'syz.0.7244': attribute type 10 has an invalid length. [ 347.227736][T21887] team0: Failed to send port change of device vlan2 via netlink (err -105) [ 347.250531][T21887] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 347.623595][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 347.623612][ T29] audit: type=1326 audit(2000000728.778:13375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.653719][ T29] audit: type=1326 audit(2000000728.778:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.700751][ T29] audit: type=1326 audit(2000000728.778:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.725158][ T29] audit: type=1326 audit(2000000728.778:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.748931][ T29] audit: type=1326 audit(2000000728.778:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.772719][ T29] audit: type=1326 audit(2000000728.778:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.796527][ T29] audit: type=1326 audit(2000000728.778:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.820171][ T29] audit: type=1326 audit(2000000728.778:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.843761][ T29] audit: type=1326 audit(2000000728.778:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 347.867391][ T29] audit: type=1326 audit(2000000728.778:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.4.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 348.087127][T21944] __nla_validate_parse: 9 callbacks suppressed [ 348.087148][T21944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7260'. [ 348.260412][T21947] netlink: 'syz.0.7265': attribute type 2 has an invalid length. [ 348.268278][T21947] netlink: 'syz.0.7265': attribute type 2 has an invalid length. [ 348.276241][T21947] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 348.284163][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7265'. [ 348.528735][T21967] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 348.608685][T21973] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.666714][T21981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7274'. [ 348.682474][T21973] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.728667][T21973] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.788904][T21973] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.871854][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7285'. [ 348.901096][ T783] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.918425][ T783] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.944617][T21991] team1: entered promiscuous mode [ 348.949863][T21991] team1: entered allmulticast mode [ 348.968705][T21995] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7286'. [ 348.973174][T21991] 8021q: adding VLAN 0 to HW filter on device team1 [ 349.001865][ T783] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.016561][ T783] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.092380][T22003] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.208488][T22003] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.268449][T22003] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.318716][T22003] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.296683][T22144] loop9: detected capacity change from 0 to 7 [ 350.312595][T22144] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.322871][T22144] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.330967][T22144] loop9: unable to read partition table [ 350.338117][T22144] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 350.338117][T22144] ) failed (rc=-5) [ 350.739585][T22180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7309'. [ 350.850651][T22185] sctp: [Deprecated]: syz.0.7312 (pid 22185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.850651][T22185] Use struct sctp_sack_info instead [ 352.633495][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 352.633513][ T29] audit: type=1326 audit(2000000733.788:13505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.670315][ T29] audit: type=1326 audit(2000000733.788:13506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.694042][ T29] audit: type=1326 audit(2000000733.788:13507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.717913][ T29] audit: type=1326 audit(2000000733.828:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.741616][ T29] audit: type=1326 audit(2000000733.828:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.765432][ T29] audit: type=1326 audit(2000000733.828:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.789154][ T29] audit: type=1326 audit(2000000733.828:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.812780][ T29] audit: type=1326 audit(2000000733.828:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.836598][ T29] audit: type=1326 audit(2000000733.828:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.860312][ T29] audit: type=1326 audit(2000000733.828:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22256 comm="syz.8.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 352.887894][T22278] netlink: 'syz.8.7347': attribute type 11 has an invalid length. [ 352.945752][T22284] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7350'. [ 353.002749][T22289] wg2: left promiscuous mode [ 353.007475][T22289] wg2: left allmulticast mode [ 353.028611][T22289] wg2: entered promiscuous mode [ 353.033542][T22289] wg2: entered allmulticast mode [ 353.089384][T22294] veth4: entered promiscuous mode [ 353.095201][T22294] veth4: entered allmulticast mode [ 353.306486][ T8011] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.324323][ T7975] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.333034][ T7975] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.353043][ T7975] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.541195][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7363'. [ 353.882143][T22328] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.908388][T22328] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.958125][T22328] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.998510][T22328] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.054960][ T1591] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.066282][ T1591] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.078541][ T1591] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.089672][ T1591] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.604512][T22361] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7381'. [ 355.374775][T22388] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.427584][T22390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22390 comm=syz.4.7395 [ 355.447734][T22388] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.517854][T22388] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.587166][T22388] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.815043][T22409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7403'. [ 356.402124][T22439] veth1_macvtap: left promiscuous mode [ 356.408081][T22439] macsec0: entered promiscuous mode [ 357.197359][T22465] netem: incorrect ge model size [ 357.202378][T22465] netem: change failed [ 357.289023][T22471] netlink: 'syz.0.7430': attribute type 1 has an invalid length. [ 357.306110][T22471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.329925][T22471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.339148][T22471] bond2: (slave batadv0): making interface the new active one [ 357.348690][T22471] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 357.484988][T22490] netlink: 'syz.4.7436': attribute type 1 has an invalid length. [ 357.511537][T22490] bond7: (slave veth7): Enslaving as an active interface with a down link [ 357.525852][T22490] bond7: entered promiscuous mode [ 357.531025][T22490] bond7: entered allmulticast mode [ 357.546649][T22490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.794987][ T8009] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.808654][ T8009] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.839216][ T8009] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.859183][ T8009] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.018062][T22503] loop8: detected capacity change from 0 to 512 [ 358.024835][T22503] EXT4-fs: Ignoring removed i_version option [ 358.030972][T22503] EXT4-fs: Ignoring removed bh option [ 358.069615][T22503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.099953][T22503] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.138535][T22512] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.221335][T22512] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.268541][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.290455][T22512] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.323202][T22520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.333163][T22520] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.343896][T22520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.364101][T22512] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.418275][T22523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.456436][ T8021] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.473771][ T8014] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.486401][ T8014] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.511144][ T7967] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.595475][T22520] loop8: detected capacity change from 0 to 2048 [ 358.624352][T22520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.723970][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.897450][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 358.897468][ T29] audit: type=1400 audit(2000000740.058:13913): avc: denied { getopt } for pid=22533 comm="syz.8.7451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.081143][T22541] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.7454'. [ 359.151924][T22543] netlink: 'syz.7.7455': attribute type 39 has an invalid length. [ 359.374988][ T29] audit: type=1400 audit(2000000740.528:13914): avc: denied { create } for pid=22549 comm="syz.0.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 359.778736][T22565] ipvlan2: entered promiscuous mode [ 359.803051][T22565] bridge0: port 1(ipvlan2) entered blocking state [ 359.809883][T22565] bridge0: port 1(ipvlan2) entered disabled state [ 359.829813][T22565] ipvlan2: entered allmulticast mode [ 359.835250][T22565] bridge0: entered allmulticast mode [ 359.842194][T22565] ipvlan2: left allmulticast mode [ 359.847442][T22565] bridge0: left allmulticast mode [ 360.194069][T22582] netlink: 'syz.4.7470': attribute type 1 has an invalid length. [ 360.231022][T22582] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.292738][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 360.331201][T22582] bond8 (unregistering): Released all slaves [ 360.404825][T22594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 360.438896][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7477'. [ 360.624401][ T29] audit: type=1326 audit(2000000741.778:13915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.655780][ T29] audit: type=1326 audit(2000000741.778:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.679611][ T29] audit: type=1326 audit(2000000741.808:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.706799][ T29] audit: type=1326 audit(2000000741.808:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.730795][ T29] audit: type=1326 audit(2000000741.808:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.754785][ T29] audit: type=1326 audit(2000000741.808:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.778769][ T29] audit: type=1326 audit(2000000741.808:13921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.802637][ T29] audit: type=1326 audit(2000000741.808:13922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.0.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 360.873290][T22615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7482'. [ 360.898592][T22615] team1: entered promiscuous mode [ 360.903710][T22615] team1: entered allmulticast mode [ 360.914670][T22615] 8021q: adding VLAN 0 to HW filter on device team1 [ 361.106797][T22632] kernel profiling enabled (shift: 63) [ 361.112355][T22632] profiling shift: 63 too large [ 361.143983][T22634] xt_hashlimit: max too large, truncated to 1048576 [ 361.502265][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7500'. [ 361.538818][T22668] netlink: 'syz.4.7504': attribute type 12 has an invalid length. [ 361.711323][T22680] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 361.798678][T22689] netlink: 'syz.5.7515': attribute type 10 has an invalid length. [ 362.767755][T22727] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7528'. [ 363.091707][T22743] loop8: detected capacity change from 0 to 2048 [ 363.109186][T22743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 363.151242][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 363.279311][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7543'. [ 363.373066][T22774] netlink: 'syz.8.7547': attribute type 10 has an invalid length. [ 364.042820][T22819] netem: change failed [ 364.196562][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 364.196583][ T29] audit: type=1400 audit(2000000745.318:14056): avc: denied { bind } for pid=22822 comm="syz.0.7568" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.223703][ T29] audit: type=1400 audit(2000000745.318:14057): avc: denied { node_bind } for pid=22822 comm="syz.0.7568" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 364.456100][T22849] Cannot find add_set index 2 as target [ 364.506420][T22857] veth6: entered promiscuous mode [ 364.511680][T22857] veth6: entered allmulticast mode [ 364.655846][ T29] audit: type=1326 audit(2000000745.808:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.682559][ T29] audit: type=1326 audit(2000000745.808:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.706697][ T29] audit: type=1326 audit(2000000745.818:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.730502][ T29] audit: type=1326 audit(2000000745.818:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.754152][ T29] audit: type=1326 audit(2000000745.818:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.782773][ T29] audit: type=1326 audit(2000000745.818:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.806636][ T29] audit: type=1326 audit(2000000745.818:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.830293][ T29] audit: type=1326 audit(2000000745.818:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 364.985223][T22897] loop8: detected capacity change from 0 to 764 [ 364.997627][T22897] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 365.026187][T22899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.048626][T22899] netlink: 'syz.4.7598': attribute type 10 has an invalid length. [ 365.056581][T22899] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7598'. [ 365.065908][T22899] team0: entered promiscuous mode [ 365.071043][T22899] geneve1: entered promiscuous mode [ 365.095146][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7598'. [ 365.136122][T22910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22910 comm=syz.5.7603 [ 365.149340][T22911] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7600'. [ 365.351302][T22931] netlink: 'syz.0.7611': attribute type 1 has an invalid length. [ 365.371015][T22931] bond3: entered promiscuous mode [ 365.376225][T22931] bond3: entered allmulticast mode [ 365.402790][T22931] geneve2: entered allmulticast mode [ 365.421411][T22931] bond3: (slave geneve2): making interface the new active one [ 365.429031][T22931] geneve2: entered promiscuous mode [ 365.450565][T22931] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 365.464714][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7611'. [ 365.474789][T22931] bond3: left promiscuous mode [ 365.479783][T22931] geneve2: left promiscuous mode [ 365.484892][T22931] bond3: left allmulticast mode [ 365.491102][T22931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.548913][T22938] netlink: 'syz.0.7615': attribute type 39 has an invalid length. [ 365.629614][T22956] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7620'. [ 366.252975][T22993] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7636'. [ 366.781291][T23039] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.818205][T23039] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.888224][T23039] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.939398][T23039] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.010782][ T7994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.019155][ T7994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.043672][ T7994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.065841][ T7994] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.243251][T23082] wireguard0: entered promiscuous mode [ 368.248907][T23082] wireguard0: entered allmulticast mode [ 368.367809][T23089] netlink: 'syz.8.7673': attribute type 7 has an invalid length. [ 368.375621][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7673'. [ 368.479846][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7674'. [ 368.514505][T23095] hsr_slave_0: left promiscuous mode [ 368.551125][T23094] tipc: Failed to remove unknown binding: 66,1,1/0:2844532513/2844532515 [ 368.569037][T23095] hsr_slave_1: left promiscuous mode [ 368.706504][T23101] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7679'. [ 368.905001][T23122] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7678'. [ 369.360539][T23155] siw: device registration error -23 [ 369.618747][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 369.618763][ T29] audit: type=1326 audit(2000000750.778:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.4.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 369.662036][ T29] audit: type=1326 audit(2000000750.778:14255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.4.7706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 369.685856][ T29] audit: type=1326 audit(2000000750.788:14256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.709488][ T29] audit: type=1326 audit(2000000750.788:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.733282][ T29] audit: type=1326 audit(2000000750.788:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.756936][ T29] audit: type=1326 audit(2000000750.788:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.780641][ T29] audit: type=1326 audit(2000000750.788:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.804358][ T29] audit: type=1326 audit(2000000750.788:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.827997][ T29] audit: type=1326 audit(2000000750.788:14262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 369.851765][ T29] audit: type=1326 audit(2000000750.798:14263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.8.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32701efc9 code=0x7ffc0000 [ 370.060718][T23191] netlink: 'syz.4.7713': attribute type 1 has an invalid length. [ 370.068584][T23191] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.7713'. [ 370.258687][T23205] netlink: 'syz.7.7719': attribute type 27 has an invalid length. [ 370.583357][T23205] team0: left promiscuous mode [ 370.588293][T23205] team0: left allmulticast mode [ 370.633067][T23205] ip6gre1: left allmulticast mode [ 370.680501][T23205] veth4: left promiscuous mode [ 370.685534][T23205] veth4: left allmulticast mode [ 370.816560][T23205] bond4: left allmulticast mode [ 370.821545][T23205] bond4: left promiscuous mode [ 370.879353][T23205] macvtap1: left promiscuous mode [ 370.884463][T23205] macvtap1: left allmulticast mode [ 370.976932][ T7974] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.986518][ T7974] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.995423][ T7974] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.083463][ T7974] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.187349][T23220] vlan1: entered allmulticast mode [ 371.467191][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7732'. [ 371.667210][T23242] ref_ctr increment failed for inode: 0x820 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811e608b80 [ 371.697853][T23242] ref_ctr increment failed for inode: 0x820 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811e608b80 [ 371.738154][T23239] uprobe: syz.8.7735:23239 failed to unregister, leaking uprobe [ 371.834290][T23255] tipc: New replicast peer: 255.255.255.83 [ 371.840307][T23255] tipc: Enabled bearer , priority 10 [ 371.848901][T23257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23257 comm=syz.0.7742 [ 371.877378][T23239] uprobe: syz.8.7735:23239 failed to unregister, leaking uprobe [ 371.893855][T23261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7743'. [ 371.928368][T23261] bond2: (slave ip6gretap0): Releasing active interface [ 371.935477][T23261] ip6gretap0 (unregistering): left allmulticast mode [ 371.961023][T23265] sit0: entered allmulticast mode [ 371.975276][T23265] sit0: entered promiscuous mode [ 372.157529][T23288] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 372.254651][T23291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7756'. [ 372.516151][T23319] netlink: 'syz.8.7767': attribute type 5 has an invalid length. [ 372.614659][T23334] loop8: detected capacity change from 0 to 512 [ 372.634542][T23334] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 372.909158][T23345] bridge0: entered promiscuous mode [ 372.914845][T23345] macvtap1: entered allmulticast mode [ 372.920377][T23345] bridge0: entered allmulticast mode [ 372.930104][T23345] bridge0: port 1(macvtap1) entered blocking state [ 372.937088][T23345] bridge0: port 1(macvtap1) entered disabled state [ 372.946028][T23347] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7778'. [ 372.955476][T23345] bridge0: left allmulticast mode [ 372.960781][T23345] bridge0: left promiscuous mode [ 372.990151][T23347] IPVS: Error connecting to the multicast addr [ 373.101594][T23353] 9pnet_fd: Insufficient options for proto=fd [ 373.416790][T23361] netlink: 'syz.5.7784': attribute type 153 has an invalid length. [ 373.874891][T23383] batadv_slave_0: entered allmulticast mode [ 373.883051][T23383] batadv_slave_0: left allmulticast mode [ 374.161541][T23403] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7801'. [ 374.579065][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7813'. [ 374.593322][T23429] hsr_slave_0: left promiscuous mode [ 374.624886][T23429] hsr_slave_1: left promiscuous mode [ 374.667231][T23437] lo: entered allmulticast mode [ 374.887504][T23448] tipc: Enabling of bearer rejected, failed to enable media [ 374.959790][T23451] netlink: 'syz.0.7823': attribute type 1 has an invalid length. [ 374.967805][T23451] netlink: 'syz.0.7823': attribute type 4 has an invalid length. [ 374.975552][T23451] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7823'. [ 375.003899][T23451] netlink: 'syz.0.7823': attribute type 1 has an invalid length. [ 375.011873][T23451] netlink: 'syz.0.7823': attribute type 4 has an invalid length. [ 375.019735][T23451] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7823'. [ 375.038462][T23455] netlink: 'syz.7.7825': attribute type 30 has an invalid length. [ 375.226911][T23464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23464 comm=syz.7.7829 [ 375.401927][T23482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7837'. [ 375.425685][T23487] netlink: 'syz.4.7839': attribute type 30 has an invalid length. [ 375.469266][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7837'. [ 375.535415][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7843'. [ 375.695864][T23508] netlink: 'syz.8.7848': attribute type 1 has an invalid length. [ 375.712274][T23514] tipc: New replicast peer: 255.255.255.255 [ 375.719001][T23514] tipc: Enabled bearer , priority 10 [ 375.743584][T23508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.754065][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 375.754081][ T29] audit: type=1326 audit(2000000756.918:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 375.784677][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7848'. [ 375.793756][ T29] audit: type=1326 audit(2000000756.948:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 375.817548][ T29] audit: type=1326 audit(2000000756.948:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 375.841379][ T29] audit: type=1326 audit(2000000756.948:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 375.865281][ T29] audit: type=1326 audit(2000000756.948:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43d6def003 code=0x7ffc0000 [ 375.888769][ T29] audit: type=1326 audit(2000000756.948:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43d6deda7f code=0x7ffc0000 [ 375.912347][ T29] audit: type=1326 audit(2000000756.948:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f43d6def057 code=0x7ffc0000 [ 375.936523][ T29] audit: type=1326 audit(2000000756.958:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43d6ded810 code=0x7ffc0000 [ 375.960263][ T29] audit: type=1326 audit(2000000756.958:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43d6deebcb code=0x7ffc0000 [ 375.984376][ T29] audit: type=1326 audit(2000000756.958:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.5.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43d6dedc2a code=0x7ffc0000 [ 376.011787][T23508] bond4 (unregistering): Released all slaves [ 376.357964][ T7970] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.377799][ T7970] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.386275][ T7970] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.415175][ T7970] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.735422][T23550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7863'. [ 376.748520][T23551] vlan1: entered allmulticast mode [ 376.775710][T23550] IPVS: Unknown mcast interface: ipvlan1 [ 377.216017][T23580] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 377.282041][T23583] netlink: 'syz.8.7878': attribute type 4 has an invalid length. [ 377.324474][T23583] netlink: 'syz.8.7878': attribute type 4 has an invalid length. [ 377.671883][T23605] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.718833][T23605] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.769692][T23605] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.839975][T23605] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.914731][ T7994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.917309][T23621] loop8: detected capacity change from 0 to 512 [ 377.934281][ T7994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.950222][ T7994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.066581][ T7994] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.076010][T23621] EXT4-fs (loop8): orphan cleanup on readonly fs [ 378.083147][T23621] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm wÞ£ÿ: bg 0: block 248: padding at end of block bitmap is not set [ 378.097830][T23621] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 378.109654][T23621] EXT4-fs (loop8): 1 truncate cleaned up [ 378.116191][T23621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.285713][T18167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.760646][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7903'. [ 379.699183][T23677] tipc: Enabling of bearer rejected, failed to enable media [ 379.810965][ T7974] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 379.820386][ T7974] bridge1 (unregistering): left promiscuous mode [ 380.279408][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.297198][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.318485][ T7974] bond0 (unregistering): Released all slaves [ 380.383520][ T7974] bond1 (unregistering): Released all slaves [ 380.456982][ T7974] bond2 (unregistering): Released all slaves [ 380.467256][ T7974] bond3 (unregistering): Released all slaves [ 380.496878][T23702] syzkaller0: entered allmulticast mode [ 380.517265][T23702] syzkaller0: entered promiscuous mode [ 380.547827][T23702] syzkaller0 (unregistering): left allmulticast mode [ 380.554750][T23702] syzkaller0 (unregistering): left promiscuous mode [ 380.575892][T23714] sctp: [Deprecated]: syz.5.7927 (pid 23714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.575892][T23714] Use struct sctp_sack_info instead [ 380.770539][ T7974] hsr_slave_0: left promiscuous mode [ 380.888414][ T7974] hsr_slave_1: left promiscuous mode [ 380.904581][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.919186][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.010668][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 381.046511][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 381.676442][ T7974] IPVS: stop unused estimator thread 0... [ 381.707573][T23680] chnl_net:caif_netlink_parms(): no params data found [ 381.760637][T23745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7938'. [ 381.806546][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 381.806567][ T29] audit: type=1326 audit(2000000762.948:14558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.836690][ T29] audit: type=1326 audit(2000000762.948:14559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.860818][ T29] audit: type=1326 audit(2000000762.948:14560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.884732][ T29] audit: type=1326 audit(2000000762.948:14561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.908708][ T29] audit: type=1326 audit(2000000762.948:14562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.932414][ T29] audit: type=1326 audit(2000000762.948:14563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.956118][ T29] audit: type=1326 audit(2000000762.948:14564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 381.979834][ T29] audit: type=1326 audit(2000000762.948:14565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 382.004147][ T29] audit: type=1326 audit(2000000762.948:14566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 382.027808][ T29] audit: type=1326 audit(2000000762.948:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.0.7940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 382.071698][T23680] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.079204][T23680] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.086603][T23680] bridge_slave_0: entered allmulticast mode [ 382.093193][T23680] bridge_slave_0: entered promiscuous mode [ 382.100270][T23680] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.107408][T23680] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.114691][T23680] bridge_slave_1: entered allmulticast mode [ 382.121382][T23680] bridge_slave_1: entered promiscuous mode [ 382.303472][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7945'. [ 382.322061][T23733] Set syz1 is full, maxelem 65536 reached [ 382.330032][T23680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.391775][T23680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.478529][T23680] team0: Port device team_slave_0 added [ 382.508003][T23680] team0: Port device team_slave_1 added [ 382.586465][T23680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.593511][T23680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.619623][T23680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.676486][T23680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.683508][T23680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.709585][T23680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.761846][T23680] hsr_slave_0: entered promiscuous mode [ 382.787149][T23680] hsr_slave_1: entered promiscuous mode [ 383.178434][T23680] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.210172][T23680] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.234572][T23680] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.249523][T23680] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.320248][T23680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.327694][T23819] siw: device registration error -23 [ 383.397760][T23680] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.423774][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.431000][ T7994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.464717][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.471955][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.642128][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7976'. [ 383.704763][T23680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.794842][T23872] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 383.956087][T23680] veth0_vlan: entered promiscuous mode [ 383.970998][T23680] veth1_vlan: entered promiscuous mode [ 383.992328][T23680] veth0_macvtap: entered promiscuous mode [ 384.001734][T23680] veth1_macvtap: entered promiscuous mode [ 384.017875][T23680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.042454][T23680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.069096][ T7969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.081486][ T7969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.091489][ T7969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.126285][ T7969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.142751][ T7969] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.153956][ T7969] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.164085][ T7969] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.178258][ T7969] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.300157][T23918] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 384.312373][T23918] batman_adv: batadv0: Adding interface: gretap1 [ 384.318812][T23918] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.345096][T23918] batman_adv: batadv0: Interface activated: gretap1 [ 384.542345][T23938] loop8: detected capacity change from 0 to 1024 [ 384.549186][T23938] EXT4-fs: inline encryption not supported [ 384.558685][T23938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.587254][T23680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.695040][T23951] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 384.728278][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8009'. [ 384.775645][T23958] netlink: 'syz.8.8011': attribute type 13 has an invalid length. [ 384.816595][T23958] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.823992][T23958] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.849422][T23960] syz2: rxe_newlink: already configured on bond0 [ 384.864719][T23958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.875221][T23958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.926983][T23958] batman_adv: batadv0: Interface deactivated: gretap1 [ 384.937688][ T8015] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.946795][ T8015] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.959344][ T8015] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.971044][ T8015] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.239811][T23988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23988 comm=syz.5.8025 [ 385.350995][T23996] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 385.388775][T24003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8032'. [ 385.497960][ T8015] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.514590][T24015] xt_hashlimit: max too large, truncated to 1048576 [ 385.531413][ T8015] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.546976][ T8015] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.562513][T24018] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8037'. [ 385.572001][ T8015] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.605736][T24018] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8037'. [ 385.689102][T24034] netlink: 'syz.4.8044': attribute type 39 has an invalid length. [ 385.730506][T24039] syzkaller0: entered allmulticast mode [ 385.739671][T24039] syzkaller0: entered promiscuous mode [ 385.748208][T24039] syzkaller0 (unregistering): left allmulticast mode [ 385.754944][T24039] syzkaller0 (unregistering): left promiscuous mode [ 386.019867][T24046] wg2: entered promiscuous mode [ 386.024823][T24046] wg2: entered allmulticast mode [ 386.054102][T24048] netlink: 'syz.5.8051': attribute type 29 has an invalid length. [ 386.062808][T24048] netlink: 'syz.5.8051': attribute type 29 has an invalid length. [ 386.072878][T24048] netlink: 500 bytes leftover after parsing attributes in process `syz.5.8051'. [ 386.202955][T24051] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8052'. [ 386.940155][T24107] xt_policy: output policy not valid in PREROUTING and INPUT [ 387.124557][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8085'. [ 387.139327][T24122] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.156203][T24122] macvlan2: entered promiscuous mode [ 387.163137][T24122] bond5: entered promiscuous mode [ 387.168720][T24122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.176885][T24122] bond5: left promiscuous mode [ 387.189016][T24126] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8086'. [ 387.218282][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 387.218299][ T29] audit: type=1326 audit(2000000768.378:14724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.256893][ T29] audit: type=1326 audit(2000000768.408:14725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.280662][ T29] audit: type=1326 audit(2000000768.408:14726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.304308][ T29] audit: type=1326 audit(2000000768.408:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.327954][ T29] audit: type=1326 audit(2000000768.408:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.352028][ T29] audit: type=1326 audit(2000000768.408:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.375752][ T29] audit: type=1326 audit(2000000768.408:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.399371][ T29] audit: type=1326 audit(2000000768.408:14731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.423044][ T29] audit: type=1326 audit(2000000768.408:14732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.446765][ T29] audit: type=1326 audit(2000000768.408:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.5.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 387.481780][T24133] 9pnet_fd: Insufficient options for proto=fd [ 387.619433][T24149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8097'. [ 388.045260][T24177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.232886][T24181] veth8: entered promiscuous mode [ 388.238243][T24181] veth8: entered allmulticast mode [ 388.416850][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8109'. [ 389.201310][T24201] futex_wake_op: syz.8.8115 tries to shift op by 144; fix this program [ 389.312386][T24216] loop8: detected capacity change from 0 to 1024 [ 389.321485][T24216] EXT4-fs: Ignoring removed oldalloc option [ 389.327662][T24216] EXT4-fs: Ignoring removed bh option [ 389.349021][T24216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.666882][T23680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.719162][T24223] netlink: 'syz.5.8133': attribute type 1 has an invalid length. [ 389.748882][T24223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.810326][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8133'. [ 389.884688][T24229] bond3 (unregistering): Released all slaves [ 390.084841][T24239] loop8: detected capacity change from 0 to 1024 [ 390.120074][T24239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.186287][T24239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.195762][T24249] tipc: Enabling of bearer rejected, failed to enable media [ 390.240182][T24261] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.8138'. [ 390.377219][T23680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.024601][T24328] netlink: 'syz.5.8166': attribute type 1 has an invalid length. [ 391.032557][T24328] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.8166'. [ 391.110562][T24331] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8167'. [ 391.123043][T24332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8168'. [ 391.133055][T24331] netlink: 'syz.5.8167': attribute type 10 has an invalid length. [ 391.193466][T24338] netlink: 'syz.7.8171': attribute type 1 has an invalid length. [ 391.215211][T24342] siw: device registration error -23 [ 391.231084][T24338] bond6: entered promiscuous mode [ 391.252615][T24338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.299089][T24343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.316743][T24343] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 391.326912][T24343] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 391.352183][T24343] bond6: (slave gre1): making interface the new active one [ 391.359497][T24343] gre1: entered promiscuous mode [ 391.383228][T24343] bond6: (slave gre1): Enslaving as an active interface with an up link [ 391.394831][T24350] netlink: 'syz.5.8176': attribute type 3 has an invalid length. [ 391.531369][T24372] netlink: 'syz.5.8186': attribute type 1 has an invalid length. [ 391.546094][T24372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.585337][T24372] veth23: entered promiscuous mode [ 391.604188][T24372] bond3: (slave veth23): Enslaving as an active interface with a down link [ 391.635807][T24372] ip6erspan0: entered promiscuous mode [ 391.649696][T24372] bond3: (slave ip6erspan0): making interface the new active one [ 391.664757][T24380] netlink: 'syz.0.8188': attribute type 3 has an invalid length. [ 391.691432][T24372] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 391.892143][T24401] netlink: 324 bytes leftover after parsing attributes in process `syz.5.8198'. [ 391.982872][T24407] loop8: detected capacity change from 0 to 1024 [ 391.989789][T24407] EXT4-fs: Ignoring removed orlov option [ 392.029450][T24407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.181915][T23680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.356503][T24426] tipc: Started in network mode [ 392.361638][T24426] tipc: Node identity 66e1dac135f2, cluster identity 4711 [ 392.368975][T24426] tipc: Enabled bearer , priority 0 [ 392.467480][ T8012] tipc: Resetting bearer [ 392.590411][T24436] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8210'. [ 392.601842][T24425] tipc: Resetting bearer [ 392.649214][T24425] tipc: Disabling bearer [ 392.789472][T24441] xt_connbytes: Forcing CT accounting to be enabled [ 393.039667][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 393.039682][ T29] audit: type=1400 audit(2000000774.198:14892): avc: denied { read } for pid=24443 comm="syz.7.8214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.067159][T24451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8214'. [ 393.191757][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.200818][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.250032][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.278911][T24460] netlink: 'syz.5.8221': attribute type 4 has an invalid length. [ 393.289653][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.298723][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.308696][T24460] netlink: 'syz.5.8221': attribute type 4 has an invalid length. [ 393.320600][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.367788][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8223'. [ 393.379285][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'. [ 393.553772][ T29] audit: type=1326 audit(2000000774.708:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.577749][ T29] audit: type=1326 audit(2000000774.708:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.642693][T24487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24487 comm=syz.0.8233 [ 393.658180][ T29] audit: type=1326 audit(2000000774.768:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.681981][ T29] audit: type=1326 audit(2000000774.768:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.705702][ T29] audit: type=1326 audit(2000000774.768:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.729353][ T29] audit: type=1326 audit(2000000774.778:14898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.753483][ T29] audit: type=1326 audit(2000000774.778:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.777322][ T29] audit: type=1326 audit(2000000774.778:14900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 393.801038][ T29] audit: type=1326 audit(2000000774.778:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.4.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622d12efc9 code=0x7ffc0000 [ 395.370007][T24534] bridge0: port 1(vlan0) entered blocking state [ 395.376403][T24534] bridge0: port 1(vlan0) entered disabled state [ 395.383235][T24534] vlan0: entered allmulticast mode [ 395.388476][T24534] bridge0: entered allmulticast mode [ 395.493249][T24534] vlan0: left allmulticast mode [ 395.498537][T24534] bridge0: left allmulticast mode [ 395.775118][T24554] netlink: 'syz.7.8257': attribute type 4 has an invalid length. [ 395.798953][T24554] netlink: 'syz.7.8257': attribute type 4 has an invalid length. [ 396.073660][T24579] xt_hashlimit: max too large, truncated to 1048576 [ 396.083335][T24579] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.427043][T24593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.458733][T24595] wg2: left promiscuous mode [ 396.463430][T24595] wg2: left allmulticast mode [ 396.614650][T24597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 396.627512][T24597] batman_adv: batadv0: Adding interface: gretap0 [ 396.633927][T24597] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.664443][T24597] batman_adv: batadv0: Interface activated: gretap0 [ 397.047350][T24623] netlink: 'syz.0.8285': attribute type 7 has an invalid length. [ 397.148449][T24632] netlink: 'syz.0.8290': attribute type 1 has an invalid length. [ 397.236749][T24632] bond5: entered promiscuous mode [ 397.241854][T24632] bond5: entered allmulticast mode [ 397.276521][T24632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 397.336740][T24632] bridge6: entered promiscuous mode [ 397.342101][T24632] bridge6: entered allmulticast mode [ 397.347884][ T8024] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.390120][T24632] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 397.400072][T24642] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 397.466554][ T7997] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.497074][T24653] syzkaller0: entered allmulticast mode [ 397.506823][T24653] syzkaller0: entered promiscuous mode [ 397.517000][T24653] syzkaller0 (unregistering): left allmulticast mode [ 397.523795][T24653] syzkaller0 (unregistering): left promiscuous mode [ 397.607991][T24659] wg2: left promiscuous mode [ 397.612798][T24659] wg2: left allmulticast mode [ 397.713150][T24679] __nla_validate_parse: 18 callbacks suppressed [ 397.713170][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8310'. [ 397.728589][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8310'. [ 397.746803][ T7957] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.762371][ T7957] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.816167][ T7957] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.833231][ T7957] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.901154][T24685] loop8: detected capacity change from 0 to 2048 [ 398.062357][T24685] rdma_rxe: rxe_newlink: failed to add bond0 [ 398.095635][T24696] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8317'. [ 398.418534][T24711] netlink: 'syz.4.8322': attribute type 1 has an invalid length. [ 398.436767][T24711] 8021q: adding VLAN 0 to HW filter on device bond8 [ 398.467979][T24711] veth11: entered promiscuous mode [ 398.476652][T24711] bond8: (slave veth11): Enslaving as an active interface with a down link [ 398.507609][T24711] ip6erspan0: entered promiscuous mode [ 398.516230][T24711] bond8: (slave ip6erspan0): making interface the new active one [ 398.525843][T24711] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 398.783328][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 398.783391][ T29] audit: type=1400 audit(2000000779.938:14918): avc: denied { name_bind } for pid=24719 comm="syz.4.8325" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 398.945533][T24733] netlink: 'syz.5.8329': attribute type 1 has an invalid length. [ 398.986886][T24733] bond4: entered promiscuous mode [ 398.992114][T24733] bond4: entered allmulticast mode [ 399.000449][T24733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.023038][T24733] bridge9: entered promiscuous mode [ 399.028629][T24733] bridge9: entered allmulticast mode [ 399.034998][T24733] bond4: (slave bridge9): Enslaving as a backup interface with an up link [ 399.147151][ T8017] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 399.279820][ T8024] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 399.702332][ T29] audit: type=1326 audit(2000000780.858:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24724 comm="syz.4.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622d12efc9 code=0x7fc00000 [ 399.980308][ T29] audit: type=1400 audit(2000000781.128:14920): avc: denied { append } for pid=24769 comm="syz.8.8340" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 400.229776][ T29] audit: type=1326 audit(2000000781.388:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 400.292704][ T29] audit: type=1326 audit(2000000781.418:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 400.316599][ T29] audit: type=1326 audit(2000000781.418:14923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 400.340275][ T29] audit: type=1326 audit(2000000781.418:14924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f14c0efc9 code=0x7ffc0000 [ 400.459638][T24785] bridge: RTM_NEWNEIGH with invalid ether address [ 400.486225][T24787] netlink: 'syz.7.8347': attribute type 39 has an invalid length. [ 400.619339][ T29] audit: type=1326 audit(2000000781.738:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24791 comm="syz.0.8350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 400.643217][ T29] audit: type=1326 audit(2000000781.748:14926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24791 comm="syz.0.8350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 400.667411][ T29] audit: type=1326 audit(2000000781.748:14927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24791 comm="syz.0.8350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769fdeefc9 code=0x7ffc0000 [ 400.992748][T24826] tipc: New replicast peer: 255.255.255.83 [ 400.998789][T24826] tipc: Enabled bearer , priority 10 [ 402.136646][T14281] tipc: Node number set to 1393810113 [ 402.266197][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8377'. [ 402.356930][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8381'. [ 402.366140][T24874] netlink: 108 bytes leftover after parsing attributes in process `syz.7.8381'. [ 402.377491][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8381'. [ 402.386746][T24874] netlink: 108 bytes leftover after parsing attributes in process `syz.7.8381'. [ 402.396002][T24874] netlink: 84 bytes leftover after parsing attributes in process `syz.7.8381'. [ 402.427860][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8382'. [ 403.130079][T24908] netlink: 'syz.5.8394': attribute type 12 has an invalid length. [ 403.282146][T24925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8402'. [ 403.354229][T24930] vlan2: entered allmulticast mode [ 403.359499][T24930] bridge0: entered allmulticast mode [ 403.424642][T24930] bridge2: port 1(vlan2) entered blocking state [ 403.431315][T24930] bridge2: port 1(vlan2) entered disabled state [ 403.449572][T24930] vlan2: entered promiscuous mode [ 403.454748][T24930] bridge0: entered promiscuous mode [ 404.274722][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 404.274737][ T29] audit: type=1326 audit(2000000785.428:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43d6de5e67 code=0x7ffc0000 [ 404.317737][ T29] audit: type=1326 audit(2000000785.468:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43d6d8b099 code=0x7ffc0000 [ 404.341553][ T29] audit: type=1326 audit(2000000785.468:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43d6de5e67 code=0x7ffc0000 [ 404.365370][ T29] audit: type=1326 audit(2000000785.468:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43d6d8b099 code=0x7ffc0000 [ 404.389037][ T29] audit: type=1326 audit(2000000785.468:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.412718][ T29] audit: type=1326 audit(2000000785.468:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.436562][ T29] audit: type=1326 audit(2000000785.468:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.460319][ T29] audit: type=1326 audit(2000000785.468:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.484029][ T29] audit: type=1326 audit(2000000785.468:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.507880][ T29] audit: type=1326 audit(2000000785.468:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24967 comm="syz.5.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d6deefc9 code=0x7ffc0000 [ 404.686408][ C1] ================================================================== [ 404.694569][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 404.701899][ C1] [ 404.704249][ C1] read-write to 0xffff88810109deb8 of 8 bytes by interrupt on cpu 0: [ 404.712351][ C1] wq_worker_tick+0x60/0x230 [ 404.716991][ C1] sched_tick+0x11a/0x270 [ 404.721423][ C1] update_process_times+0x15f/0x190 [ 404.726658][ C1] tick_nohz_handler+0x249/0x2d0 [ 404.731649][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 404.736895][ C1] hrtimer_interrupt+0x21a/0x460 [ 404.741877][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 404.747828][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 404.753577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.759591][ C1] __kcsan_check_access+0x1ae/0x1e0 [ 404.764822][ C1] kfree+0xdb/0x400 [ 404.768698][ C1] io_alloc_cache_free+0xc0/0xe0 [ 404.773711][ C1] io_futex_cache_free+0x23/0x30 [ 404.778717][ C1] io_free_alloc_caches+0x5d/0x70 [ 404.783802][ C1] io_ring_ctx_free+0x78/0x3a0 [ 404.788607][ C1] io_ring_exit_work+0x529/0x560 [ 404.793698][ C1] process_scheduled_works+0x4ce/0x9d0 [ 404.799190][ C1] worker_thread+0x582/0x770 [ 404.803841][ C1] kthread+0x489/0x510 [ 404.807938][ C1] ret_from_fork+0x122/0x1b0 [ 404.812553][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.817773][ C1] [ 404.820111][ C1] read-write to 0xffff88810109deb8 of 8 bytes by interrupt on cpu 1: [ 404.828220][ C1] wq_worker_tick+0x60/0x230 [ 404.832841][ C1] sched_tick+0x11a/0x270 [ 404.837201][ C1] update_process_times+0x15f/0x190 [ 404.842475][ C1] tick_nohz_handler+0x249/0x2d0 [ 404.847534][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 404.852764][ C1] hrtimer_interrupt+0x21a/0x460 [ 404.857831][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 404.863783][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 404.869532][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.875551][ C1] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 404.881251][ C1] xa_destroy+0x26d/0x2a0 [ 404.885618][ C1] io_ring_ctx_free+0x31f/0x3a0 [ 404.890678][ C1] io_ring_exit_work+0x529/0x560 [ 404.895648][ C1] process_scheduled_works+0x4ce/0x9d0 [ 404.901226][ C1] worker_thread+0x582/0x770 [ 404.905949][ C1] kthread+0x489/0x510 [ 404.910040][ C1] ret_from_fork+0x122/0x1b0 [ 404.914669][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.919457][ C1] [ 404.921789][ C1] value changed: 0x0000000000273710 -> 0x0000000000275e20 [ 404.928906][ C1] [ 404.931242][ C1] Reported by Kernel Concurrency Sanitizer on: [ 404.937408][ C1] CPU: 1 UID: 0 PID: 7961 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(voluntary) [ 404.947413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 404.957575][ C1] Workqueue: iou_exit io_ring_exit_work [ 404.963170][ C1] ==================================================================