last executing test programs: 36.392231993s ago: executing program 2 (id=4648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00'}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_hash}]}, 0xff, 0x599, &(0x7f0000001500)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000fb5a244b1e2e35d0b69b0bbd66c8ec210000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x22000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x101, 0x7ffd, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 36.049558608s ago: executing program 1 (id=4650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x41341) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000006c0)={0x1, 0xd101, @status={[0x83b4, 0xfffffffffffffffe, 0x37, 0x6, 0x8000, 0xf52d]}, [0x5, 0x5, 0xeac8, 0xffffffffffff0001, 0x0, 0x7, 0xa77, 0xf99, 0x380000000, 0xffffffff, 0x8, 0x1, 0x4, 0x101, 0x3, 0x3, 0x4, 0x3, 0x3, 0x8, 0x6, 0x7fffffffffffffff, 0x2, 0x8, 0x4, 0x1, 0x9e8, 0x9, 0x101, 0xfffffffffffff9d6, 0x6, 0x7, 0x5, 0x3, 0x80000001, 0x4, 0x800000000000000, 0xb, 0x8, 0x100, 0x985, 0x71, 0x7, 0x7, 0x6, 0x8, 0x1, 0x6d, 0xd, 0x9, 0xba71, 0x1ff, 0x4, 0x2, 0x9, 0x5, 0xc2b5, 0x9, 0x5, 0x80, 0x6, 0x8000, 0x100, 0x8]}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x7, 0x0, 0x0, @buffer={0x2, 0x4f, &(0x7f00000000c0)=""/79}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.386622205s ago: executing program 1 (id=4653): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 34.813301313s ago: executing program 2 (id=4656): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x410, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd396}}, './file0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 34.789034985s ago: executing program 2 (id=4657): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f00000000c0)="$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") setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "0001000000000800"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37", 0x24}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000005c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xd6\xd1\x98\x1a\xe3\xbd\x00\x00\x00\xf3s\xd8\xb3`\xdd\xc5\x87\xf4\xfc\x8d\xd9\x9e\x00\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) write$selinux_load(r0, 0x0, 0x65) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='-.{[^.(}/\x00', 0xfffffffffffffffc) 34.782944706s ago: executing program 2 (id=4658): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{}, {0x6}, {0x60, 0x1}, {0x12, 0x1}, {0x12}, {0x3}, {0xc}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4008040) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000000)='./file0/bus\x00', 0x104000015) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 33.94413346s ago: executing program 1 (id=4661): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004fbd8c920d8b3fbffffff00"/28], 0x50) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r4 = socket(0x80000000000000a, 0x2, 0x0) pipe2$9p(0x0, 0x840) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @empty, 0x5}}}, 0x108) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r3, 0x3) ftruncate(0xffffffffffffffff, 0x2007ffc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0x8}, r6, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r6, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 33.916926493s ago: executing program 2 (id=4663): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='thermal_power_allocator_pid\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nodioread_nolock}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680100001700"], 0x168}}, 0x4004040) 33.796074346s ago: executing program 1 (id=4667): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, 0x1411, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/hibernate_compression_threads', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 33.64874255s ago: executing program 1 (id=4668): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 33.568121529s ago: executing program 2 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = open(0x0, 0x62041, 0x60) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="3edc7392b237d47267dc226d4482342cfa2ea6ba2a56b10f6084e9afa4fab5f90b717923f4d112631bfc773d665e203cd1384e0734981c6e867e48c56fa9f86ae2768c0e", 0x44}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)="63f4920d49b08851dbe3a13a2cfea74e1626518d0c80d307a8763e5597e5c0508636f1c19d8551de3aabdee3dacf9c16a70dcdbba3fca52ba25ac2175f683fa835da28398c92b82161bd30712db07fe6e92f8ca8dde66510a0fb48f65dc677", 0x5f}, {&(0x7f0000000840)="d77b9c8512b59b561d2aef841463f22a53087d8d8b12ab22cb9fac5d5ae60bf3d93cc75d16a1fd446be34bf8b7b8b28033e41223fc8e2face1b320503af912e3c8b4c9cea59c3cc1ffa859c645553ea317187dbdc2e05b0d9a7dfb70dc4ae091c8b5186ca2efc3ed7f9f8676d4009b83004b18000e18dfa47d70c2bdc543b01d1023a8f3d282f87cb0da68b7f00a0508a71b11946fc24cac871c96ad360e3372b5eb2845165fcca0e15da9e21a70c6132c89da01ae31152577de7041795bea134cbf0f2e2882d7b5b8a5072d01ca2bcada93cb93538807d6086bd04f3ad389f5f15bb41b94457b7bf8", 0xe9}, {&(0x7f0000000200)="095b860e855f425f9c4003bb6c23441792aadbc6fba614577f4fc59188e0d203f65b2505c2bcfdaf3718d8d3ad2f28f35db68d837bc1e02c7c048be93c09680aae3d766e39c09aedde78a7004f1fc26a6f5ed707ef702cf7ffffffffffffea02000000e5d10eae14dd3a81ff29dcfea133abd31990b3d90f8ccc30152897ec555466434735948683791c5cb784da8e18c031ccf53c59551c04d4bf1064fd88093563d0491db4a9180f4cac011997419f2059f5dd0dae98914405c02d", 0xbc}, {&(0x7f0000000ac0)="9f788417fb68fd0c03a0af56d34c35de5ebff109141331a1b737205540450586cb370eb9429e5975b8273fd40d20aa381a49f0d35c76d2287aabe04c0061d0deea51c175b38013f039838b3676c915161adee3acd9dcec0009850e34ba200eaa1a780610096d53d56ce5f18c0d4806e652bea8831511e80e8bbbb7ebdf7c246e7e8a4377dd0ab1b2a1ca01566a24e8e74ce47dda8d15478e5691da1ed3a3aae1", 0xa0}, {&(0x7f0000000b80)="9d803cca991e38cc6515d73e135cd7395612cf009a56f2c39f91a02425f5fefa2220e9798a55ac12dfe6b17fb41744d97ba73a60e78e0107a76e63a7a52dc41d8cb2012f3292e461eb600ea8696c542e1a89fc9ee88d2a53483a31c678f5bf7194eff0f1774c5a12aa5c6aea4b48f93ec96c3a0c1424815e72362f5ad05c5a30ce53f5a4f957cfa4c3440332842651aee3b9dd215ac1d0274decedc528a9dc06b6160d94e24b229eb2cff9de81b85308b27fb988ba0c4b18fbf9c2769c33b18b19ba0c4ea1ec32cb249387c0ef07c45a2181d081805f47e7", 0xd8}, {&(0x7f0000000740)="6d7ec4c20022df002535cd9aeae06db631dd1485b8454208d58c466d5d54df72fbf1", 0x22}], 0x6}}], 0x2, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x2, 0x3, 0x5, 0x3, 0x7}, 0x401, 0x1}) r3 = socket$inet(0x2, 0x2, 0x1) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000d00)={0x154, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcb}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6a1}, {0x6, 0x11, 0x4d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2d5b}}]}, 0x154}, 0x1, 0x0, 0x0, 0x200080c0}, 0x24004000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) ftruncate(r4, 0x1207100000) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 33.483671587s ago: executing program 1 (id=4671): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x1, &(0x7f0000000940)={{0x77359400}}, &(0x7f0000000980)) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200044a, &(0x7f00000003c0), 0xfc, 0x526, &(0x7f0000001580)="$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") r1 = socket(0x1e, 0x4, 0x0) getsockname$tipc(r1, &(0x7f0000000080)=@id, &(0x7f0000000740)=0x10) unshare(0x2a020400) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x34020000) 18.147871329s ago: executing program 32 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = open(0x0, 0x62041, 0x60) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="3edc7392b237d47267dc226d4482342cfa2ea6ba2a56b10f6084e9afa4fab5f90b717923f4d112631bfc773d665e203cd1384e0734981c6e867e48c56fa9f86ae2768c0e", 0x44}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)="63f4920d49b08851dbe3a13a2cfea74e1626518d0c80d307a8763e5597e5c0508636f1c19d8551de3aabdee3dacf9c16a70dcdbba3fca52ba25ac2175f683fa835da28398c92b82161bd30712db07fe6e92f8ca8dde66510a0fb48f65dc677", 0x5f}, {&(0x7f0000000840)="d77b9c8512b59b561d2aef841463f22a53087d8d8b12ab22cb9fac5d5ae60bf3d93cc75d16a1fd446be34bf8b7b8b28033e41223fc8e2face1b320503af912e3c8b4c9cea59c3cc1ffa859c645553ea317187dbdc2e05b0d9a7dfb70dc4ae091c8b5186ca2efc3ed7f9f8676d4009b83004b18000e18dfa47d70c2bdc543b01d1023a8f3d282f87cb0da68b7f00a0508a71b11946fc24cac871c96ad360e3372b5eb2845165fcca0e15da9e21a70c6132c89da01ae31152577de7041795bea134cbf0f2e2882d7b5b8a5072d01ca2bcada93cb93538807d6086bd04f3ad389f5f15bb41b94457b7bf8", 0xe9}, {&(0x7f0000000200)="095b860e855f425f9c4003bb6c23441792aadbc6fba614577f4fc59188e0d203f65b2505c2bcfdaf3718d8d3ad2f28f35db68d837bc1e02c7c048be93c09680aae3d766e39c09aedde78a7004f1fc26a6f5ed707ef702cf7ffffffffffffea02000000e5d10eae14dd3a81ff29dcfea133abd31990b3d90f8ccc30152897ec555466434735948683791c5cb784da8e18c031ccf53c59551c04d4bf1064fd88093563d0491db4a9180f4cac011997419f2059f5dd0dae98914405c02d", 0xbc}, {&(0x7f0000000ac0)="9f788417fb68fd0c03a0af56d34c35de5ebff109141331a1b737205540450586cb370eb9429e5975b8273fd40d20aa381a49f0d35c76d2287aabe04c0061d0deea51c175b38013f039838b3676c915161adee3acd9dcec0009850e34ba200eaa1a780610096d53d56ce5f18c0d4806e652bea8831511e80e8bbbb7ebdf7c246e7e8a4377dd0ab1b2a1ca01566a24e8e74ce47dda8d15478e5691da1ed3a3aae1", 0xa0}, {&(0x7f0000000b80)="9d803cca991e38cc6515d73e135cd7395612cf009a56f2c39f91a02425f5fefa2220e9798a55ac12dfe6b17fb41744d97ba73a60e78e0107a76e63a7a52dc41d8cb2012f3292e461eb600ea8696c542e1a89fc9ee88d2a53483a31c678f5bf7194eff0f1774c5a12aa5c6aea4b48f93ec96c3a0c1424815e72362f5ad05c5a30ce53f5a4f957cfa4c3440332842651aee3b9dd215ac1d0274decedc528a9dc06b6160d94e24b229eb2cff9de81b85308b27fb988ba0c4b18fbf9c2769c33b18b19ba0c4ea1ec32cb249387c0ef07c45a2181d081805f47e7", 0xd8}, {&(0x7f0000000740)="6d7ec4c20022df002535cd9aeae06db631dd1485b8454208d58c466d5d54df72fbf1", 0x22}], 0x6}}], 0x2, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x2, 0x3, 0x5, 0x3, 0x7}, 0x401, 0x1}) r3 = socket$inet(0x2, 0x2, 0x1) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000d00)={0x154, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcb}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6a1}, {0x6, 0x11, 0x4d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2d5b}}]}, 0x154}, 0x1, 0x0, 0x0, 0x200080c0}, 0x24004000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) ftruncate(r4, 0x1207100000) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 18.123136642s ago: executing program 33 (id=4671): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x1, &(0x7f0000000940)={{0x77359400}}, &(0x7f0000000980)) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200044a, &(0x7f00000003c0), 0xfc, 0x526, &(0x7f0000001580)="$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") r1 = socket(0x1e, 0x4, 0x0) getsockname$tipc(r1, &(0x7f0000000080)=@id, &(0x7f0000000740)=0x10) unshare(0x2a020400) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x34020000) 5.308975742s ago: executing program 6 (id=4771): r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, &(0x7f0000000300), 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.279817286s ago: executing program 0 (id=4773): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 4.061140131s ago: executing program 6 (id=4782): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 4.022835626s ago: executing program 3 (id=4783): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)={[{0x2b, 'cpuset'}]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x100000000}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000400)={'icmp\x00'}, &(0x7f0000000440)=0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.98722616s ago: executing program 5 (id=4784): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.908445308s ago: executing program 3 (id=4785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.692952001s ago: executing program 5 (id=4786): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xffc6, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7, 0x18e04, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000380)={[{@jqfmt_vfsv1}, {@usrjquota_path={'usrjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x82, 0x49c, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000140)='./file0\x00') utime(&(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)={0xa, 0x4}) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@gettaction={0x128, 0x32, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3432}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x81f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x54}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x404c880}, 0x44844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e657400000005000400"], 0x64}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3.157788776s ago: executing program 0 (id=4787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0xc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3.152996347s ago: executing program 4 (id=4788): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@private=0xa010100, @rand_addr=0x64010102}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0], 0x10, 0x7f4, &(0x7f0000000d80)="$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") socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r5, 0x4) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) 2.349994651s ago: executing program 3 (id=4789): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = gettid() fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xffffffff}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_create(0xb, &(0x7f0000000ac0)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000b00)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x4e, 0x0) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4, 0x30, r0, 0x8a227000) 2.316166374s ago: executing program 5 (id=4790): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.223497314s ago: executing program 4 (id=4791): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x7f, 0x3, 0x5, 0x9}, {0x101, 0x2, 0x3, 0x401}, {0x2, 0x5, 0x7, 0xb}, {0x7fff, 0x7, 0xf5, 0x7}, {0xc09, 0x8, 0x12, 0x3ff}, {0x2, 0xe, 0x8, 0x7fff}, {0xff, 0x1, 0x7, 0xa}, {0x8, 0xc, 0x4, 0x7}, {0x10, 0x9, 0x1, 0x7}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) listen(0xffffffffffffffff, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 2.168126481s ago: executing program 0 (id=4792): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9fea010018000000000000000c0000000c0000000c000000020000000000000901000000002e3061000030612e2e6100"], &(0x7f0000000200)=""/219, 0x30, 0xdb, 0x0, 0x5, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1f2, &(0x7f0000000480)={0x0, 0x163e, 0x80, 0x1fffff, 0x106c}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) unshare(0x20400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lseek(0xffffffffffffffff, 0x93, 0x3) 2.123077286s ago: executing program 6 (id=4793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.094399218s ago: executing program 4 (id=4794): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@lazytime}, {@jqfmt_vfsold}, {@nobh}, {@jqfmt_vfsold}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd73, 0x5, 0x200009, 0x6, 0x10, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, 0x0, &(0x7f0000000b00)) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x814) 1.641571034s ago: executing program 0 (id=4795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(&(0x7f0000000240), 0x0, 0x0, 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4212, r2, 0x201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast}}}}) 1.543818084s ago: executing program 4 (id=4796): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x8004}, 0x18) r2 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x2000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 1.350554064s ago: executing program 3 (id=4797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x2200018, &(0x7f0000000d00)=ANY=[], 0x1, 0x364, &(0x7f0000000900)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="00000000000000002c00000000000000feffffff000000000000000000000000950000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(0xffffffffffffffff, 0x81fd) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000, 0xa00}]) select(0x0, 0x0, &(0x7f00000014c0)={0x1}, 0x0, 0x0) sync() socket$nl_route(0x10, 0x3, 0x0) 1.323253357s ago: executing program 6 (id=4798): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) unshare(0x20000400) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0xe3, "f5e67443ced9ff099a3b9651f10fe0a3a35539c60359404809d59513a477c1425b0c795e82cf6ee931d80fe04557320ef1500a100bf9e69236ca64b958e6688bf8240a47bd6fa65acaa331c788a97785d756110a4fcc80fd2dea49ed993e351d95926126d838e5f1e33f6a3bc2c2bf0c2eff8f475257da1b0db3be99d51c41a449c17b864f6f4ab64dcc584069ca810e688f8225136f7fb56d2af79716096ddd18ee8cd01337420ee2a7f2576fef08deb0ae92532e1ae4ceada9149857182fe4e621c7f5f1603dfcaa72b2b319a480d80d3851fda2e91b16975f11f9f20c82c1ad536c"}, &(0x7f0000000500)=0xeb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x2}, 0x8) sendfile(r1, r1, 0x0, 0x800000009) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 1.319367577s ago: executing program 5 (id=4799): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) futimesat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket(0xa, 0x80805, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.272257051s ago: executing program 5 (id=4800): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = fsmount(r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000040)=0x6f2) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) 1.197700518s ago: executing program 0 (id=4801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) read(r4, &(0x7f0000000440)=""/52, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000300), &(0x7f0000000180)=r1}, 0x20) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) lstat(&(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x11}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x8000350a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 910.472067ms ago: executing program 4 (id=4802): personality(0x87bf5ac905ea0f7f) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xff]}, 0x8}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r1, &(0x7f0000000080), 0x20000000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@private1, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x100, 0xffffffffffffffeb, 0x12, r6}) mkdir(&(0x7f00000020c0)='./file0\x00', 0xce) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x210884, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, r8, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x21}, 0x94) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 863.077122ms ago: executing program 6 (id=4803): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x81, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x5, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x4, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x9b, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x4, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x100, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x40000007, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0xffffffff, 0x4b, 0x4, 0xffff8000, 0x7fffffff, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x9, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0x2, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0xa, 0x10, 0x1ad, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x200, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x9, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x5, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x6, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x3, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x7, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0x102, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0xff, 0x4, 0x0, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='attr/prev\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x38000016) 742.990035ms ago: executing program 6 (id=4804): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x40, r2, 0x4, 0x70bd2f, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x40}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYBLOB="3b9736fc84846aff9fde464f4e83eb0e38a4735f4d9f1d938bdbbd1185f3662424a73c8834fed463e9efbec98b71d213f1c67586d434e310fc8d0f4474613fc92e3bbb76b1378a818454a3b941191c7637722dd65f8d29358c006b3a0ec0bd66f1aea5512f9e8a6845a5088eb98c14c6409f2690cd4d8c5ef275502e5391edc9357eaeba3da1278c803581345be816a57dd1f3bea9c3ad1df5f472798463c09793a032f16663afc92e1fb3d51f26077ac35054524e4a5894729e9253b7888211a7fd92224868acb61e80dc775ef95f5ff066f3a8fe25b6f9bb6165"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x52}, @NFACCT_PKTS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 481.582721ms ago: executing program 4 (id=4805): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x5fa3, 0x8, 0x8000, 0x80400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000480)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x7}}}, 0x18) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 420.085908ms ago: executing program 3 (id=4806): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB], 0x40}}, 0x40000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 266.345674ms ago: executing program 3 (id=4807): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 314.036863][T15546] syzkaller0: left promiscuous mode [ 314.038757][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3992'. [ 314.042312][T15546] syzkaller0: left allmulticast mode [ 314.080574][T15546] veth6: left promiscuous mode [ 314.086650][T15546] veth6: left allmulticast mode [ 314.091858][T15546] veth9: left promiscuous mode [ 314.098102][T15546] veth11: left promiscuous mode [ 314.124238][ T29] audit: type=1326 audit(1768134616.108:27624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.151718][ T29] audit: type=1326 audit(1768134616.108:27625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.177101][ T29] audit: type=1326 audit(1768134616.138:27626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.201213][ T29] audit: type=1326 audit(1768134616.138:27627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.226716][ T29] audit: type=1326 audit(1768134616.138:27628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.251082][ T29] audit: type=1326 audit(1768134616.138:27629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.276373][ T29] audit: type=1326 audit(1768134616.138:27630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.301105][ T29] audit: type=1326 audit(1768134616.138:27631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.329591][ T29] audit: type=1326 audit(1768134616.138:27632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.4.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 314.448227][T15556] loop1: detected capacity change from 0 to 512 [ 314.465656][T15556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 314.486944][T15556] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3997: bad orphan inode 131083 [ 314.499684][T15556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.516317][T15565] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3999'. [ 314.526988][T15565] netlink: zone id is out of range [ 314.532213][T15565] netlink: zone id is out of range [ 314.546627][T15565] netlink: zone id is out of range [ 314.551911][T15565] netlink: zone id is out of range [ 314.558475][T15565] netlink: zone id is out of range [ 314.564129][T15565] netlink: zone id is out of range [ 314.570901][T15565] netlink: zone id is out of range [ 314.594566][T15565] netlink: zone id is out of range [ 314.674507][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.148778][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'. [ 315.357320][T15568] sch_fq: defrate 4294967295 ignored. [ 315.525010][T15588] 9p: Bad value for 'wfdno' [ 316.454198][T15605] bond1: left allmulticast mode [ 316.459737][T15605] bond2: left promiscuous mode [ 316.467181][T15605] gretap1: left promiscuous mode [ 316.552717][T15611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4008'. [ 316.570083][T15605] erspan1: left allmulticast mode [ 317.492152][T15632] syz.1.4019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 317.507977][T15632] CPU: 0 UID: 0 PID: 15632 Comm: syz.1.4019 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.508027][T15632] Tainted: [W]=WARN [ 317.508035][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.508125][T15632] Call Trace: [ 317.508135][T15632] [ 317.508145][T15632] __dump_stack+0x1d/0x30 [ 317.508173][T15632] dump_stack_lvl+0x95/0xd0 [ 317.508193][T15632] dump_stack+0x15/0x1b [ 317.508212][T15632] warn_alloc+0x12b/0x1a0 [ 317.508234][T15632] ? __schedule+0x85f/0xcd0 [ 317.508281][T15632] ? __rcu_read_unlock+0x4f/0x70 [ 317.508305][T15632] __vmalloc_node_range_noprof+0xa0/0x1310 [ 317.508331][T15632] ? __futex_wait+0x1fa/0x260 [ 317.508409][T15632] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.508442][T15632] ? __rcu_read_unlock+0x4f/0x70 [ 317.508490][T15632] ? avc_has_perm_noaudit+0xab/0x130 [ 317.508521][T15632] ? should_fail_ex+0x30/0x280 [ 317.508544][T15632] ? should_failslab+0x8c/0xb0 [ 317.508590][T15632] vmalloc_user_noprof+0x7d/0xb0 [ 317.508619][T15632] ? xskq_create+0x80/0xe0 [ 317.508648][T15632] xskq_create+0x80/0xe0 [ 317.508700][T15632] xsk_init_queue+0x95/0xf0 [ 317.508732][T15632] xsk_setsockopt+0x3f5/0x640 [ 317.508796][T15632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.508839][T15632] __sys_setsockopt+0x184/0x200 [ 317.508865][T15632] __x64_sys_setsockopt+0x64/0x80 [ 317.508889][T15632] x64_sys_call+0x21d5/0x3000 [ 317.508918][T15632] do_syscall_64+0xca/0x2b0 [ 317.508998][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.509018][T15632] RIP: 0033:0x7f371535f749 [ 317.509037][T15632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.509114][T15632] RSP: 002b:00007f3713dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.509184][T15632] RAX: ffffffffffffffda RBX: 00007f37155b5fa0 RCX: 00007f371535f749 [ 317.509200][T15632] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 317.509215][T15632] RBP: 00007f37153e3f91 R08: 0000000000000004 R09: 0000000000000000 [ 317.509227][T15632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.509240][T15632] R13: 00007f37155b6038 R14: 00007f37155b5fa0 R15: 00007ffde63c07d8 [ 317.509279][T15632] [ 317.509287][T15632] Mem-Info: [ 317.767583][T15632] active_anon:18634 inactive_anon:7892 isolated_anon:0 [ 317.767583][T15632] active_file:16757 inactive_file:12623 isolated_file:0 [ 317.767583][T15632] unevictable:16362 dirty:230 writeback:0 [ 317.767583][T15632] slab_reclaimable:3745 slab_unreclaimable:51729 [ 317.767583][T15632] mapped:31710 shmem:10875 pagetables:1821 [ 317.767583][T15632] sec_pagetables:0 bounce:0 [ 317.767583][T15632] kernel_misc_reclaimable:0 [ 317.767583][T15632] free:1611834 free_pcp:28841 free_cma:0 [ 317.815889][T15632] Node 0 active_anon:74536kB inactive_anon:31568kB active_file:67028kB inactive_file:50492kB unevictable:65448kB isolated(anon):0kB isolated(file):0kB mapped:126840kB dirty:920kB writeback:0kB shmem:43500kB kernel_stack:5152kB pagetables:7284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.846128][T15632] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.877790][T15632] lowmem_reserve[]: 0 2880 7859 7859 [ 317.883421][T15632] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 317.916250][T15632] lowmem_reserve[]: 0 0 4978 4978 [ 317.921459][T15632] Node 0 Normal free:3487724kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74564kB inactive_anon:31568kB active_file:67028kB inactive_file:50492kB unevictable:65448kB writepending:932kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:109968kB local_pcp:67556kB free_cma:0kB [ 317.957073][T15632] lowmem_reserve[]: 0 0 0 0 [ 317.961893][T15632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.976389][T15632] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 317.994316][T15632] Node 0 Normal: 552*4kB (UE) 287*8kB (UE) 274*16kB (UME) 999*32kB (UME) 482*64kB (UM) 204*128kB (UME) 94*256kB (UM) 320*512kB (UME) 263*1024kB (UM) 218*2048kB (UM) 607*4096kB (UM) = 3487768kB [ 318.014621][T15632] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 318.025737][T15632] 56738 total pagecache pages [ 318.030702][T15632] 152 pages in swap cache [ 318.035132][T15632] Free swap = 15432kB [ 318.040559][T15632] Total swap = 124996kB [ 318.045050][T15632] 2097051 pages RAM [ 318.049895][T15632] 0 pages HighMem/MovableOnly [ 318.055070][T15632] 81271 pages reserved [ 318.277434][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 318.337229][T15658] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.349057][T15656] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.388995][T15658] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.629385][T15658] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.697128][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 318.697144][ T29] audit: type=1400 audit(1768134620.688:27776): avc: denied { lock } for pid=15667 comm="syz.3.4031" path="socket:[54056]" dev="sockfs" ino=54056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 318.793973][T15673] lo speed is unknown, defaulting to 1000 [ 318.820079][T15658] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.914260][ T4098] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.953535][ T4098] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.992846][ T4098] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.114502][ T4098] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.142090][T15673] lo speed is unknown, defaulting to 1000 [ 319.203815][T15677] lo speed is unknown, defaulting to 1000 [ 319.357562][ T29] audit: type=1326 audit(1768134621.348:27777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.406806][ T29] audit: type=1326 audit(1768134621.348:27778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.412413][T15677] lo speed is unknown, defaulting to 1000 [ 319.432353][ T29] audit: type=1326 audit(1768134621.348:27779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.464441][ T29] audit: type=1326 audit(1768134621.348:27780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.489894][ T29] audit: type=1326 audit(1768134621.348:27781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.515356][ T29] audit: type=1326 audit(1768134621.348:27782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.540964][ T29] audit: type=1326 audit(1768134621.348:27783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.566380][ T29] audit: type=1326 audit(1768134621.348:27784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.591560][ T29] audit: type=1326 audit(1768134621.348:27785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.3.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 319.618271][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4039'. [ 319.656766][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4039'. [ 319.847406][T15703] bond7: (slave erspan0): Releasing active interface [ 319.854146][T15703] ip6gretap0: entered promiscuous mode [ 319.887444][T15703] net_ratelimit: 20 callbacks suppressed [ 319.887462][T15703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.300999][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 320.327740][T15725] batadv0 (unregistering): left allmulticast mode [ 320.334336][T15725] batadv0 (unregistering): left promiscuous mode [ 320.342107][T15725] bridge0: port 3(batadv0) entered disabled state [ 320.439188][T15727] syzkaller0: entered promiscuous mode [ 320.445071][T15727] syzkaller0: entered allmulticast mode [ 320.476805][T15727] tipc: Resetting bearer [ 320.561464][T15730] tipc: Enabling of bearer rejected, already enabled [ 320.810592][T15742] lo speed is unknown, defaulting to 1000 [ 320.880542][T15742] lo speed is unknown, defaulting to 1000 [ 321.644971][T15740] lo speed is unknown, defaulting to 1000 [ 321.822678][T15763] tipc: Enabling of bearer rejected, failed to enable media [ 321.839200][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 321.900187][T15767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=15767 comm=syz.2.4057 [ 322.050459][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.096835][T15771] tipc: Enabling of bearer rejected, failed to enable media [ 322.115038][T15740] lo speed is unknown, defaulting to 1000 [ 322.136555][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.145805][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.219134][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.229677][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.254251][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 322.540029][T15786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15786 comm=syz.2.4063 [ 323.062733][T15809] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 323.130976][T15812] netlink: 'syz.3.4073': attribute type 4 has an invalid length. [ 323.191386][T15814] lo speed is unknown, defaulting to 1000 [ 323.253976][T15818] veth18: entered promiscuous mode [ 323.264773][T15814] lo speed is unknown, defaulting to 1000 [ 324.525449][T15834] siw: device registration error -23 [ 324.691000][T15845] 9pnet_virtio: no channels available for device 127.0.0.1 [ 324.730389][T15845] blktrace: Concurrent blktraces are not allowed on loop6 [ 324.837621][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 324.837638][ T29] audit: type=1326 audit(1768134626.828:28221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 324.926463][ T29] audit: type=1326 audit(1768134626.868:28222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 324.951875][ T29] audit: type=1326 audit(1768134626.868:28223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 324.977853][ T29] audit: type=1326 audit(1768134626.868:28224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.003205][ T29] audit: type=1326 audit(1768134626.868:28225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15854 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 325.027932][ T29] audit: type=1326 audit(1768134626.888:28226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.052932][ T29] audit: type=1326 audit(1768134626.888:28227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.077774][ T29] audit: type=1326 audit(1768134626.888:28228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.103584][ T29] audit: type=1326 audit(1768134626.888:28229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.129007][ T29] audit: type=1326 audit(1768134626.888:28230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 325.216044][T15859] netlink: 'syz.3.4089': attribute type 7 has an invalid length. [ 325.327752][T15864] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 325.337010][T15864] __nla_validate_parse: 6 callbacks suppressed [ 325.337028][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'. [ 325.433013][T15873] wireguard0: entered promiscuous mode [ 325.440103][T15873] wireguard0: entered allmulticast mode [ 325.630427][T15878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.668698][T15880] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.719167][T15880] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.738416][T15866] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 325.745112][T15866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 325.754958][T15866] vhci_hcd vhci_hcd.0: Device attached [ 325.771487][T15880] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.823452][T15887] vhci_hcd: connection closed [ 325.823673][ T4105] vhci_hcd vhci_hcd.1: stop threads [ 325.835104][ T4105] vhci_hcd vhci_hcd.1: release socket [ 325.841894][ T4105] vhci_hcd vhci_hcd.1: disconnect device [ 325.897289][T15880] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.954584][ T4105] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.978516][ T4105] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.002002][ T4105] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.023052][ T4105] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.117129][T15903] tipc: Enabling of bearer rejected, already enabled [ 326.149068][T15906] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 326.157196][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4105'. [ 326.868225][T15943] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 326.940013][T15940] tipc: Enabling of bearer rejected, already enabled [ 326.989686][T15948] tipc: Enabling of bearer rejected, already enabled [ 327.071256][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4121'. [ 327.609169][T15964] tipc: Bearer : already 2 bearers with priority 10 [ 327.617747][T15964] tipc: Bearer : trying with adjusted priority [ 327.631716][T15956] loop1: detected capacity change from 0 to 512 [ 327.658876][T15956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.673172][T15964] tipc: New replicast peer: 255.255.255.255 [ 327.680938][T15964] tipc: Enabled bearer , priority 9 [ 327.697967][T15956] ext4 filesystem being mounted at /813/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.777240][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.874627][T15971] netlink: 4 bytes leftover after parsing attributes in process `tracefs'. [ 328.324355][T15989] lo speed is unknown, defaulting to 1000 [ 328.390497][T15989] lo speed is unknown, defaulting to 1000 [ 329.001613][T16006] netlink: 'syz.1.4139': attribute type 1 has an invalid length. [ 329.019406][T16006] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.060379][T16006] bond6: (slave gretap2): making interface the new active one [ 329.080375][T16006] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 329.099256][T16006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16006 comm=syz.1.4139 [ 329.316595][T16037] loop1: detected capacity change from 0 to 1024 [ 329.332505][T16037] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.381630][T16037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.546952][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4149'. [ 329.658509][T16055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4152'. [ 329.703706][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.733306][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4156'. [ 329.748116][T16062] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 329.762715][T16065] loop1: detected capacity change from 0 to 256 [ 329.781477][T16065] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿ' [ 329.866732][T16071] bond7: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 329.907321][T16071] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.924948][T16071] bond7: (slave lo): Enslaving as a backup interface with an up link [ 329.936932][T16071] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 329.959472][T16074] dummy0: entered promiscuous mode [ 329.971150][T16074] dummy0: left promiscuous mode [ 329.994509][T16076] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 330.004489][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 330.004561][ T29] audit: type=1400 audit(1768134631.988:28639): avc: denied { relabelto } for pid=16075 comm="syz.1.4159" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 330.039835][ T29] audit: type=1400 audit(1768134631.988:28640): avc: denied { associate } for pid=16075 comm="syz.1.4159" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="/usr/sbin/ntpd" [ 330.084725][T16080] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4171'. [ 330.111024][T16080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4171'. [ 330.204755][T16087] netlink: 'syz.0.4163': attribute type 2 has an invalid length. [ 330.214013][T16087] netlink: 199792 bytes leftover after parsing attributes in process `syz.0.4163'. [ 330.312293][T16092] netlink: 'syz.1.4165': attribute type 12 has an invalid length. [ 330.374860][T16097] loop1: detected capacity change from 0 to 128 [ 330.378617][ T29] audit: type=1326 audit(1768134632.358:28641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.407297][ T29] audit: type=1326 audit(1768134632.358:28642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.431434][ T29] audit: type=1326 audit(1768134632.358:28643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.458019][ T29] audit: type=1326 audit(1768134632.358:28644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.483709][ T29] audit: type=1326 audit(1768134632.358:28645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.509370][ T29] audit: type=1326 audit(1768134632.358:28646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.534689][ T29] audit: type=1326 audit(1768134632.358:28647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.560033][ T29] audit: type=1326 audit(1768134632.358:28648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.1.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 330.643085][T16107] tipc: Enabling of bearer rejected, already enabled [ 330.718140][T16109] tipc: Resetting bearer [ 330.747314][T16109] bond3: (slave veth1): Releasing active interface [ 330.763771][T16109] bond4: (slave veth9): Releasing active interface [ 330.771640][T16109] bond4: (slave veth9): the permanent HWaddr of slave - 8e:dc:7f:16:ca:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.809484][T16118] netlink: 'syz.1.4168': attribute type 10 has an invalid length. [ 330.818585][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4168'. [ 330.947430][T16109] bond4: (slave veth11): Releasing active interface [ 330.959628][T16109] bond6: (slave gretap2): Releasing active interface [ 330.995227][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 331.005577][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4168'. [ 331.014933][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 331.024211][T16120] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4168'. [ 331.382979][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4168'. [ 331.462862][T16125] lo speed is unknown, defaulting to 1000 [ 331.530838][T16125] lo speed is unknown, defaulting to 1000 [ 332.034946][T16140] netlink: 'syz.1.4180': attribute type 16 has an invalid length. [ 332.044131][T16140] netlink: 'syz.1.4180': attribute type 3 has an invalid length. [ 332.052340][T16140] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4180'. [ 332.426179][T16144] lo speed is unknown, defaulting to 1000 [ 332.712145][T16144] lo speed is unknown, defaulting to 1000 [ 333.501128][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 333.544203][T16165] 8021q: adding VLAN 0 to HW filter on device bond9 [ 333.652696][T16178] tipc: Enabling of bearer rejected, already enabled [ 333.667489][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 333.677687][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4186'. [ 333.721352][T16173] netlink: 'syz.3.4186': attribute type 10 has an invalid length. [ 333.740336][T16165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.750536][T16165] bond9: (slave bond0): Enslaving as an active interface with an up link [ 333.763134][T16178] tipc: Resetting bearer [ 333.795179][T16173] .`: (slave bridge0): Enslaving as an active interface with an up link [ 333.901498][T16188] bond0: Caught tx_queue_len zero misconfig [ 333.962174][T16196] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 333.986714][T16196] SELinux: failed to load policy [ 334.020612][T16199] netlink: 'syz.3.4199': attribute type 4 has an invalid length. [ 334.449445][T16214] netem: change failed [ 335.217779][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 335.217798][ T29] audit: type=1326 audit(1768134637.208:28830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.253128][ T29] audit: type=1326 audit(1768134637.248:28831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.279346][ T29] audit: type=1326 audit(1768134637.248:28832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.305476][ T29] audit: type=1326 audit(1768134637.248:28833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.330814][ T29] audit: type=1326 audit(1768134637.248:28834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.356515][ T29] audit: type=1326 audit(1768134637.248:28835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.382220][ T29] audit: type=1326 audit(1768134637.248:28836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.408044][ T29] audit: type=1326 audit(1768134637.248:28837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.433435][ T29] audit: type=1326 audit(1768134637.248:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.458882][ T29] audit: type=1326 audit(1768134637.248:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.4.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 335.494962][T16253] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 335.536717][T16255] netlink: 'syz.2.4219': attribute type 13 has an invalid length. [ 335.563495][T16257] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 335.629180][ T4082] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.639694][ T4082] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.673186][ T4082] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.692722][ T4082] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.014208][T16271] netlink: 'syz.0.4222': attribute type 7 has an invalid length. [ 336.330311][T16277] Process accounting resumed [ 336.472835][T16282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16282 comm=syz.4.4228 [ 336.633862][T16284] lo speed is unknown, defaulting to 1000 [ 336.709641][T16288] netlink: 'syz.0.4230': attribute type 13 has an invalid length. [ 336.765114][T16284] lo speed is unknown, defaulting to 1000 [ 336.941869][T16303] __nla_validate_parse: 6 callbacks suppressed [ 336.941887][T16303] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4236'. [ 336.960001][T16303] lo: entered promiscuous mode [ 336.965002][T16303] lo: entered allmulticast mode [ 336.994217][T16303] tunl0: entered promiscuous mode [ 337.000696][T16303] tunl0: entered allmulticast mode [ 337.008833][T16303] gre0: entered promiscuous mode [ 337.014190][T16303] gre0: entered allmulticast mode [ 337.024328][T16303] erspan0: entered promiscuous mode [ 337.031489][T16303] erspan0: entered allmulticast mode [ 337.039532][T16303] ip_vti0: entered promiscuous mode [ 337.046598][T16303] ip_vti0: entered allmulticast mode [ 337.057667][T16303] ip6_vti0: entered promiscuous mode [ 337.064016][T16303] ip6_vti0: entered allmulticast mode [ 337.074007][T16303] sit0: entered promiscuous mode [ 337.080353][T16303] sit0: entered allmulticast mode [ 337.089962][T16303] ip6tnl0: entered promiscuous mode [ 337.095691][T16303] ip6tnl0: entered allmulticast mode [ 337.102864][T16303] ip6gre0: entered promiscuous mode [ 337.108324][T16303] ip6gre0: entered allmulticast mode [ 337.114839][T16303] bond0: entered promiscuous mode [ 337.120294][T16303] dummy0: entered promiscuous mode [ 337.127009][T16303] bond0: entered allmulticast mode [ 337.133321][T16303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.144805][T16303] nlmon0: entered promiscuous mode [ 337.151275][T16303] nlmon0: entered allmulticast mode [ 337.159235][T16303] 0ªX¹¦À: entered promiscuous mode [ 337.164485][T16303] 0ªX¹¦À: entered allmulticast mode [ 337.171217][T16303] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 337.189637][ T3481] lo speed is unknown, defaulting to 1000 [ 337.196851][ T3481] syz2: Port: 1 Link ACTIVE [ 337.221415][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4238'. [ 337.242770][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4238'. [ 337.284319][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 337.393823][T16314] netlink: 'syz.2.4240': attribute type 4 has an invalid length. [ 337.403222][T16314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4240'. [ 337.414582][T16314] .`: renamed from bond0 [ 337.610861][T16325] siw: device registration error -23 [ 337.618249][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 337.651140][T16329] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4247'. [ 337.752469][T16336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4250'. [ 338.092414][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4254'. [ 338.238282][T16350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16350 comm=syz.3.4255 [ 338.377044][T16356] loop1: detected capacity change from 0 to 128 [ 338.387510][T16356] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.403649][T16356] ext4 filesystem being mounted at /839/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.461942][T16360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.642390][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4263'. [ 339.713687][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.813459][T16393] loop1: detected capacity change from 0 to 128 [ 340.192052][T16410] blktrace: Concurrent blktraces are not allowed on loop6 [ 340.225671][ T29] kauditd_printk_skb: 1327 callbacks suppressed [ 340.225689][ T29] audit: type=1326 audit(1768134642.219:30167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3715392005 code=0x7ffc0000 [ 340.286932][ T29] audit: type=1326 audit(1768134642.249:30168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.2.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28cd9165e7 code=0x7ffc0000 [ 340.312049][ T29] audit: type=1326 audit(1768134642.249:30169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.2.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28cd8bb829 code=0x7ffc0000 [ 340.337575][ T29] audit: type=1326 audit(1768134642.249:30170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.2.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 340.362505][ T29] audit: type=1326 audit(1768134642.249:30171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37153565e7 code=0x7ffc0000 [ 340.387962][ T29] audit: type=1326 audit(1768134642.249:30172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37152fb829 code=0x7ffc0000 [ 340.413482][ T29] audit: type=1326 audit(1768134642.249:30173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 340.438311][ T29] audit: type=1326 audit(1768134642.249:30174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3715392005 code=0x7ffc0000 [ 340.464414][ T29] audit: type=1326 audit(1768134642.249:30175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3715392005 code=0x7ffc0000 [ 340.490036][ T29] audit: type=1326 audit(1768134642.249:30176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.1.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37153565e7 code=0x7ffc0000 [ 340.641812][T16421] netlink: 'syz.2.4278': attribute type 13 has an invalid length. [ 340.878232][T16431] lo speed is unknown, defaulting to 1000 [ 340.931409][T16434] netlink: 'syz.1.4281': attribute type 10 has an invalid length. [ 340.947600][T16431] lo speed is unknown, defaulting to 1000 [ 341.097268][T16449] 9p: Bad value for 'rfdno' [ 341.108688][T16449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.661349][T16477] netlink: 'syz.2.4298': attribute type 11 has an invalid length. [ 341.701120][T16478] lo speed is unknown, defaulting to 1000 [ 341.972940][T16478] lo speed is unknown, defaulting to 1000 [ 342.426934][ T3491] kernel write not supported for file [eventfd] (pid: 3491 comm: kworker/1:6) [ 342.446991][T16490] __nla_validate_parse: 4 callbacks suppressed [ 342.447008][T16490] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4303'. [ 342.474856][T16493] lo speed is unknown, defaulting to 1000 [ 342.542244][T16493] lo speed is unknown, defaulting to 1000 [ 342.645229][T16503] lo speed is unknown, defaulting to 1000 [ 342.715304][T16503] lo speed is unknown, defaulting to 1000 [ 342.876770][T16501] lo speed is unknown, defaulting to 1000 [ 342.890289][T16506] xt_hashlimit: max too large, truncated to 1048576 [ 342.969549][T16506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.201421][T16501] lo speed is unknown, defaulting to 1000 [ 343.677983][T16478] Set syz1 is full, maxelem 65536 reached [ 344.567701][T16532] lo speed is unknown, defaulting to 1000 [ 344.642636][T16532] lo speed is unknown, defaulting to 1000 [ 344.930624][T16539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.447568][T16543] ipt_ECN: cannot use operation on non-tcp rule [ 345.496922][T16521] netlink: 'syz.0.4309': attribute type 4 has an invalid length. [ 345.520622][ T3396] lo speed is unknown, defaulting to 1000 [ 345.527758][ T3396] syz2: Port: 1 Link DOWN [ 345.868032][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 345.868051][ T29] audit: type=1326 audit(1768134647.859:30322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 345.926704][ T29] audit: type=1326 audit(1768134647.889:30323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 345.952499][ T29] audit: type=1326 audit(1768134647.889:30324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 345.978420][ T29] audit: type=1326 audit(1768134647.889:30325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 346.023684][T16554] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4319'. [ 346.037243][T16554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4319'. [ 346.252989][ T29] audit: type=1326 audit(1768134648.239:30326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 346.278307][ T29] audit: type=1326 audit(1768134648.239:30327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 346.304236][ T29] audit: type=1326 audit(1768134648.269:30328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 346.329498][ T29] audit: type=1326 audit(1768134648.269:30329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 346.354900][ T29] audit: type=1326 audit(1768134648.269:30330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 346.380122][ T29] audit: type=1326 audit(1768134648.289:30331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.4.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 347.573705][T16595] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4335'. [ 347.586628][T16595] netlink: zone id is out of range [ 347.592060][T16595] netlink: zone id is out of range [ 347.597648][T16595] netlink: zone id is out of range [ 347.603429][T16595] netlink: zone id is out of range [ 347.619375][T16595] netlink: set zone limit has 8 unknown bytes [ 347.740784][T16597] lo speed is unknown, defaulting to 1000 [ 347.782951][T16597] lo speed is unknown, defaulting to 1000 [ 348.016287][T16606] loop1: detected capacity change from 0 to 1024 [ 348.023123][T16606] SELinux: security_context_str_to_sid () failed with errno=-22 [ 348.040234][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4339'. [ 348.196144][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 348.260420][T16620] lo speed is unknown, defaulting to 1000 [ 348.299641][T16620] lo speed is unknown, defaulting to 1000 [ 349.183049][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4346'. [ 349.200231][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4346'. [ 349.382623][T16636] veth12: entered promiscuous mode [ 350.252057][T16658] lo speed is unknown, defaulting to 1000 [ 350.320002][T16658] lo speed is unknown, defaulting to 1000 [ 351.009413][T16671] lo speed is unknown, defaulting to 1000 [ 351.074655][T16671] lo speed is unknown, defaulting to 1000 [ 351.441473][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 352.521145][T16678] lo speed is unknown, defaulting to 1000 [ 352.659141][T16673] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.753142][T16678] lo speed is unknown, defaulting to 1000 [ 353.333901][T16703] netlink: 'syz.4.4365': attribute type 4 has an invalid length. [ 353.634450][T16721] tipc: New replicast peer: 255.255.255.83 [ 353.641868][T16721] tipc: Enabled bearer , priority 10 [ 353.694198][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'. [ 353.746889][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'. [ 353.816114][T16731] loop1: detected capacity change from 0 to 256 [ 353.832846][T16731] FAT-fs (loop1): bogus number of FAT sectors [ 353.840238][T16731] FAT-fs (loop1): Can't find a valid FAT filesystem [ 353.913253][T16733] netlink: 'syz.4.4377': attribute type 2 has an invalid length. [ 353.922313][T16733] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.4377'. [ 354.066938][T16736] lo speed is unknown, defaulting to 1000 [ 354.135283][T16736] lo speed is unknown, defaulting to 1000 [ 354.233259][T16745] lo speed is unknown, defaulting to 1000 [ 354.321250][T16745] lo speed is unknown, defaulting to 1000 [ 354.696893][ T3481] tipc: Node number set to 1587034685 [ 356.308914][T16753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4383'. [ 356.635209][T16769] netlink: 'syz.1.4396': attribute type 1 has an invalid length. [ 356.670656][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 356.670676][ T29] audit: type=1400 audit(1768134914.665:30702): avc: denied { relabelfrom } for pid=16771 comm="syz.1.4387" name="" dev="pipefs" ino=58664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 356.737796][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 356.761559][T16779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=16779 comm=syz.1.4389 [ 356.787847][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 356.986792][ T29] audit: type=1326 audit(1768134914.985:30703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.019130][ T29] audit: type=1326 audit(1768134915.005:30704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.043949][ T29] audit: type=1326 audit(1768134915.005:30705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.069122][ T29] audit: type=1326 audit(1768134915.005:30706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.093973][ T29] audit: type=1326 audit(1768134915.005:30707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.118577][ T29] audit: type=1326 audit(1768134915.005:30708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.124426][T16788] netlink: 'syz.0.4401': attribute type 39 has an invalid length. [ 357.142453][ T29] audit: type=1326 audit(1768134915.005:30709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.142490][ T29] audit: type=1326 audit(1768134915.005:30710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.142538][ T29] audit: type=1326 audit(1768134915.005:30711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 357.482372][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4398'. [ 357.577555][T16812] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 358.032878][T16822] loop1: detected capacity change from 0 to 512 [ 358.087268][T16822] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4406: bg 0: block 248: padding at end of block bitmap is not set [ 358.140149][T16822] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4406: Failed to acquire dquot type 1 [ 358.171613][T16822] EXT4-fs (loop1): 1 truncate cleaned up [ 358.191135][T16822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.241978][T16822] ext4 filesystem being mounted at /869/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.295119][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.717647][T16838] lo speed is unknown, defaulting to 1000 [ 358.771628][T16838] lo speed is unknown, defaulting to 1000 [ 358.887987][T16848] lo speed is unknown, defaulting to 1000 [ 359.845469][T16848] lo speed is unknown, defaulting to 1000 [ 359.858070][T16868] lo: Caught tx_queue_len zero misconfig [ 359.863893][T16868] netem: change failed [ 359.884657][T16870] tipc: Enabling of bearer rejected, failed to enable media [ 360.368715][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4420'. [ 360.408538][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4420'. [ 361.888623][ T29] kauditd_printk_skb: 884 callbacks suppressed [ 361.888640][ T29] audit: type=1326 audit(1768134919.885:31594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 361.920771][ T29] audit: type=1326 audit(1768134919.885:31595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 361.946022][ T29] audit: type=1326 audit(1768134919.885:31596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 361.971208][ T29] audit: type=1326 audit(1768134919.885:31597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 361.996500][ T29] audit: type=1326 audit(1768134919.885:31598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 362.020739][ T29] audit: type=1326 audit(1768134919.885:31599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 362.047798][ T29] audit: type=1326 audit(1768134919.885:31600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 362.073392][ T29] audit: type=1326 audit(1768134919.885:31601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 362.098203][ T29] audit: type=1326 audit(1768134919.885:31602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 362.123152][ T29] audit: type=1326 audit(1768134919.885:31603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16887 comm="syz.3.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 363.246406][T16928] lo speed is unknown, defaulting to 1000 [ 363.308159][T16928] lo speed is unknown, defaulting to 1000 [ 364.088770][T16935] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 364.115597][T16935] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4438'. [ 364.228523][T16935] hsr_slave_0: left promiscuous mode [ 364.234315][T16935] hsr_slave_1: left promiscuous mode [ 365.230565][T16953] netlink: 'syz.1.4444': attribute type 12 has an invalid length. [ 365.568444][T16973] 8021q: adding VLAN 0 to HW filter on device .` [ 365.578519][T16973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.663686][T16976] lo speed is unknown, defaulting to 1000 [ 365.741840][T16976] lo speed is unknown, defaulting to 1000 [ 366.859999][T16998] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4456'. [ 366.902162][T16999] lo speed is unknown, defaulting to 1000 [ 366.967200][T16999] lo speed is unknown, defaulting to 1000 [ 367.997165][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 367.997182][ T29] audit: type=1400 audit(1768134925.995:32495): avc: denied { append } for pid=17006 comm="syz.1.4459" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.229501][ T29] audit: type=1326 audit(1768134926.225:32496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.307637][ T29] audit: type=1326 audit(1768134926.245:32497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.332787][ T29] audit: type=1326 audit(1768134926.255:32498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.358226][ T29] audit: type=1326 audit(1768134926.255:32499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.549096][ T29] audit: type=1326 audit(1768134926.545:32500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.623536][ T29] audit: type=1326 audit(1768134926.565:32501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17009 comm="syz.4.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 368.717632][T17015] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 368.989339][ T29] audit: type=1326 audit(1768134926.985:32502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17031 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 369.014276][ T29] audit: type=1326 audit(1768134926.985:32503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17031 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 369.038456][ T29] audit: type=1326 audit(1768134926.985:32504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17031 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 369.252734][T17038] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4471'. [ 369.264610][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4471'. [ 369.274941][T17038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4471'. [ 369.288800][T17036] loop1: detected capacity change from 0 to 128 [ 369.549325][T17055] lo speed is unknown, defaulting to 1000 [ 369.618477][T17055] lo speed is unknown, defaulting to 1000 [ 371.790555][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4481'. [ 373.105399][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4480'. [ 373.144861][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 373.144877][ T29] audit: type=1326 audit(1768134931.135:32685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.178442][T17105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.179470][ T29] audit: type=1326 audit(1768134931.135:32684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28cd9165e7 code=0x7ffc0000 [ 373.208700][T17105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.213222][ T29] audit: type=1326 audit(1768134931.135:32686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28cd8bb829 code=0x7ffc0000 [ 373.245192][ T29] audit: type=1326 audit(1768134931.135:32687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28cd9165e7 code=0x7ffc0000 [ 373.270482][ T29] audit: type=1326 audit(1768134931.135:32688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28cd8bb829 code=0x7ffc0000 [ 373.295523][ T29] audit: type=1326 audit(1768134931.135:32689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.319224][ T29] audit: type=1326 audit(1768134931.145:32690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.343221][ T29] audit: type=1326 audit(1768134931.145:32691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.368286][ T29] audit: type=1326 audit(1768134931.145:32692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.393529][ T29] audit: type=1326 audit(1768134931.145:32693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.2.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 373.524355][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4489'. [ 373.534954][T17122] batadv1: left allmulticast mode [ 373.541480][T17122] batadv1: left promiscuous mode [ 373.548200][T17122] bridge0: port 4(batadv1) entered disabled state [ 373.558979][T17122] bridge_slave_1: left allmulticast mode [ 373.564704][T17122] bridge_slave_1: left promiscuous mode [ 373.571794][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.583066][T17122] bridge_slave_0: left allmulticast mode [ 373.590176][T17122] bridge_slave_0: left promiscuous mode [ 373.597517][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.865040][T17155] loop1: detected capacity change from 0 to 128 [ 374.978895][T17155] bio_check_eod: 98 callbacks suppressed [ 374.978911][T17155] syz.1.4498: attempt to access beyond end of device [ 374.978911][T17155] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 375.000670][T17155] syz.1.4498: attempt to access beyond end of device [ 375.000670][T17155] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 375.016644][T17155] syz.1.4498: attempt to access beyond end of device [ 375.016644][T17155] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 375.045370][T17155] syz.1.4498: attempt to access beyond end of device [ 375.045370][T17155] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 375.064599][T17155] syz.1.4498: attempt to access beyond end of device [ 375.064599][T17155] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 375.120892][T17161] loop1: detected capacity change from 0 to 1024 [ 375.128991][T17161] EXT4-fs: Ignoring removed orlov option [ 375.137092][T17161] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 375.158831][T17161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.079959][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.210574][T17204] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4510'. [ 376.335055][T17206] xt_hashlimit: size too large, truncated to 1048576 [ 377.269757][T17208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17208 comm=syz.2.4512 [ 378.358346][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 378.358366][ T29] audit: type=1326 audit(1768134936.355:32983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.366726][T17217] tipc: Resetting bearer [ 378.390179][ T29] audit: type=1326 audit(1768134936.385:32984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.422951][ T29] audit: type=1326 audit(1768134936.415:32985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.503398][ T29] audit: type=1326 audit(1768134936.495:32986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.529392][ T29] audit: type=1326 audit(1768134936.525:32987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.556070][ T29] audit: type=1326 audit(1768134936.555:32988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.582724][ T29] audit: type=1326 audit(1768134936.575:32989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 378.608093][ T29] audit: type=1326 audit(1768134936.575:32990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28cd91f783 code=0x7ffc0000 [ 378.631887][ T29] audit: type=1326 audit(1768134936.575:32991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f28cd91f807 code=0x7ffc0000 [ 378.657191][ T29] audit: type=1326 audit(1768134936.575:32992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17219 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f28cd8d6bdd code=0x7ffc0000 [ 378.792998][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 378.803216][T17239] batadv1: left allmulticast mode [ 378.809423][T17239] batadv1: left promiscuous mode [ 378.814666][T17239] bridge0: port 3(batadv1) entered disabled state [ 378.826930][T17239] .`: (slave bridge0): Releasing backup interface [ 379.213398][T17252] lo speed is unknown, defaulting to 1000 [ 379.314215][T17252] lo speed is unknown, defaulting to 1000 [ 379.750248][T17259] xt_hashlimit: size too large, truncated to 1048576 [ 379.963212][T17260] loop1: detected capacity change from 0 to 512 [ 380.087176][T17260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.110338][T17260] ext4 filesystem being mounted at /898/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.188206][T17259] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4527: corrupted inode contents [ 380.226965][T17259] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4527: mark_inode_dirty error [ 380.258149][T17259] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4527: corrupted inode contents [ 380.286878][T17259] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4527: mark_inode_dirty error [ 380.603520][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.817911][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4528'. [ 380.909811][T17278] dvmrp8: left allmulticast mode [ 381.350237][T17281] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 381.554018][T17293] netlink: 'syz.2.4537': attribute type 21 has an invalid length. [ 381.636766][T17298] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 381.646361][T17298] ref_ctr increment failed for inode: 0x1189 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810435f2c0 [ 381.659297][T17298] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 381.668847][T17298] ref_ctr decrement failed for inode: 0x1189 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810435f2c0 [ 381.681216][T17298] uprobe: syz.2.4538:17298 failed to unregister, leaking uprobe [ 381.903972][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4543'. [ 381.922353][T17312] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 382.222857][T17318] lo speed is unknown, defaulting to 1000 [ 382.288445][T17318] lo speed is unknown, defaulting to 1000 [ 382.602646][T17320] loop1: detected capacity change from 0 to 1024 [ 382.610894][T17320] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.619910][T17320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 382.679022][T17320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.834373][T17323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4547'. [ 382.864328][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.895228][T17323] netlink: 'syz.2.4547': attribute type 10 has an invalid length. [ 382.914399][T17331] rdma_rxe: rxe_newlink: failed to add lo [ 382.927970][T17333] bond2: left allmulticast mode [ 382.978862][T17335] lo speed is unknown, defaulting to 1000 [ 383.020919][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'. [ 383.026637][T17335] lo speed is unknown, defaulting to 1000 [ 383.031694][T17338] bridge0: port 1(gretap0) entered disabled state [ 383.367204][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 383.367221][ T29] audit: type=1326 audit(1768134941.365:33559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.398709][ T29] audit: type=1326 audit(1768134941.365:33560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.398869][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4556'. [ 383.422328][ T29] audit: type=1326 audit(1768134941.365:33561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422390][ T29] audit: type=1326 audit(1768134941.365:33562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422416][ T29] audit: type=1326 audit(1768134941.365:33563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422442][ T29] audit: type=1326 audit(1768134941.365:33564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422591][ T29] audit: type=1326 audit(1768134941.365:33565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422669][ T29] audit: type=1326 audit(1768134941.365:33566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422696][ T29] audit: type=1326 audit(1768134941.375:33567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.422723][ T29] audit: type=1326 audit(1768134941.375:33568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb21b312005 code=0x7ffc0000 [ 383.634201][T17361] netlink: 'syz.1.4556': attribute type 15 has an invalid length. [ 383.648075][T17361] vxlan0: entered promiscuous mode [ 383.654052][ T4083] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.665086][ T4083] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.677723][ T4083] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.687744][ T4083] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.707956][T17365] xt_CT: No such helper "pptp" [ 383.954358][T17380] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4560'. [ 383.965011][T17380] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4560'. [ 384.180868][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4564'. [ 384.381850][T17381] lo speed is unknown, defaulting to 1000 [ 384.397211][T17383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.517836][T17381] lo speed is unknown, defaulting to 1000 [ 384.517871][T17387] tipc: Enabling of bearer rejected, failed to enable media [ 384.590927][T17394] siw: device registration error -23 [ 385.550674][T17420] loop1: detected capacity change from 0 to 512 [ 385.581263][T17420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.597269][T17420] ext4 filesystem being mounted at /908/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.617987][T17420] pim6reg1: entered promiscuous mode [ 385.623378][T17420] pim6reg1: entered allmulticast mode [ 385.714073][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.774459][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4576'. [ 385.809935][T17436] netlink: 'syz.0.4578': attribute type 30 has an invalid length. [ 385.823765][T17438] syz!: rxe_newlink: already configured on team_slave_0 [ 385.858495][T17438] netlink: 'syz.2.4577': attribute type 13 has an invalid length. [ 386.308448][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 386.594281][T17458] lo speed is unknown, defaulting to 1000 [ 386.639453][T17458] lo speed is unknown, defaulting to 1000 [ 386.939182][T17467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4587'. [ 386.953163][T17467] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 387.013103][T17470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 387.464061][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4590'. [ 387.479266][T17477] ip6gre1: entered promiscuous mode [ 387.484696][T17477] ip6gre1: entered allmulticast mode [ 389.331200][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 389.331218][ T29] audit: type=1326 audit(1768134947.325:34425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.404203][ T29] audit: type=1326 audit(1768134947.395:34426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.457568][ T29] audit: type=1326 audit(1768134947.445:34427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.482637][ T29] audit: type=1326 audit(1768134947.445:34428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.507523][ T29] audit: type=1326 audit(1768134947.445:34429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.614409][ T29] audit: type=1326 audit(1768134947.605:34430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.639262][ T29] audit: type=1326 audit(1768134947.605:34431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.664249][ T29] audit: type=1326 audit(1768134947.605:34432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.689056][ T29] audit: type=1326 audit(1768134947.605:34433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 389.713901][ T29] audit: type=1326 audit(1768134947.605:34434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17495 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd91f749 code=0x7ffc0000 [ 390.988774][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4597'. [ 397.923262][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4607'. [ 397.933637][T17543] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4607'. [ 397.957870][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4607'. [ 397.971630][T17543] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4607'. [ 397.982847][T17543] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4607'. [ 398.005542][T17547] loop1: detected capacity change from 0 to 512 [ 398.012669][T17547] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.038580][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 398.038595][ T29] audit: type=1326 audit(1768134956.035:34598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.071556][ T29] audit: type=1326 audit(1768134956.065:34599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.097172][ T29] audit: type=1326 audit(1768134956.065:34600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.121155][ T29] audit: type=1326 audit(1768134956.065:34601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.146343][ T29] audit: type=1326 audit(1768134956.065:34602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.171368][ T29] audit: type=1326 audit(398.055:34603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.196028][ T29] audit: type=1326 audit(398.055:34604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.242135][ T29] audit: type=1326 audit(398.215:34605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.243425][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4613'. [ 398.267041][ T29] audit: type=1326 audit(398.215:34606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.267076][ T29] audit: type=1326 audit(398.215:34607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.1.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 398.274088][T17559] loop1: detected capacity change from 0 to 512 [ 398.341312][T17559] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4612: iget: bad extra_isize 90 (inode size 256) [ 398.356341][T17559] EXT4-fs (loop1): Remounting filesystem read-only [ 398.363136][T17559] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 398.374514][T17559] EXT4-fs (loop1): 1 orphan inode deleted [ 398.382467][T17559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.397256][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4613'. [ 398.417159][T17568] ref_ctr increment failed for inode: 0x11d1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881204d06c0 [ 398.457671][T17552] netlink: 'syz.3.4611': attribute type 3 has an invalid length. [ 398.501123][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.518105][T17571] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 398.732009][T17586] netlink: 'syz.4.4620': attribute type 3 has an invalid length. [ 398.732214][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4618'. [ 398.741110][T17586] netlink: 'syz.4.4620': attribute type 3 has an invalid length. [ 398.761451][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4620'. [ 398.862374][T17589] 9pnet_fd: Insufficient options for proto=fd [ 398.886740][T17589] lo speed is unknown, defaulting to 1000 [ 398.931812][T17589] lo speed is unknown, defaulting to 1000 [ 399.033274][T17595] lo speed is unknown, defaulting to 1000 [ 399.099726][T17595] lo speed is unknown, defaulting to 1000 [ 399.743896][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4627'. [ 400.104880][T17606] loop1: detected capacity change from 0 to 128 [ 400.127885][T17606] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 400.174245][T17606] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.499684][T17619] lo speed is unknown, defaulting to 1000 [ 400.592034][T17619] lo speed is unknown, defaulting to 1000 [ 400.601370][ T4136] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.881902][T17641] xt_connbytes: Forcing CT accounting to be enabled [ 401.901080][T17639] syzkaller0: entered promiscuous mode [ 401.915754][T17639] syzkaller0 (unregistering): left promiscuous mode [ 402.089404][T17650] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.145195][T17650] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.248330][T17650] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.367798][T17650] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.748240][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.908056][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.918622][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.793135][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.842031][T17675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.887921][T17673] lo speed is unknown, defaulting to 1000 [ 405.926309][T17673] lo speed is unknown, defaulting to 1000 [ 407.317580][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 407.317599][ T29] audit: type=1326 audit(407.295:34745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.351967][T17682] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 407.519933][ T29] audit: type=1326 audit(407.325:34746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.544881][ T29] audit: type=1326 audit(407.325:34747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.569893][ T29] audit: type=1326 audit(407.325:34748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.594854][ T29] audit: type=1326 audit(407.325:34749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.620442][ T29] audit: type=1326 audit(407.325:34750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.645957][ T29] audit: type=1326 audit(407.325:34751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.670591][ T29] audit: type=1326 audit(407.325:34752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.696759][ T29] audit: type=1326 audit(407.325:34753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.721071][ T29] audit: type=1326 audit(407.325:34754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17681 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371535f749 code=0x7ffc0000 [ 407.941864][T17663] Set syz1 is full, maxelem 65536 reached [ 408.433065][T17702] __nla_validate_parse: 10 callbacks suppressed [ 408.433084][T17702] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4653'. [ 408.610611][T17706] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4656'. [ 408.632177][T17706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4656'. [ 408.642558][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4656'. [ 408.812140][T17702] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4653'. [ 409.259916][T17716] Set syz1 is full, maxelem 65536 reached [ 409.606379][T17722] loop1: detected capacity change from 0 to 128 [ 409.736810][T17733] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 409.772831][T17733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.854853][T17739] loop1: detected capacity change from 0 to 8192 [ 409.876029][T17733] bond5: (slave veth13): Enslaving as an active interface with a down link [ 409.941541][T17742] bond0: (slave dummy0): Releasing backup interface [ 409.955155][T17728] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4663'. [ 410.002836][T17742] dummy0: left promiscuous mode [ 410.014007][T17742] bond5: (slave dummy0): making interface the new active one [ 410.031684][T17742] dummy0: entered promiscuous mode [ 410.039291][T17742] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 412.691715][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 412.691815][ T29] audit: type=1326 audit(410.115:34932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 412.723960][ T29] audit: type=1326 audit(410.115:34933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 412.756625][ T29] audit: type=1326 audit(412.735:34934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6000082005 code=0x7ffc0000 [ 412.809830][ T29] audit: type=1326 audit(412.755:34935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6000082005 code=0x7ffc0000 [ 412.926770][ T29] audit: type=1326 audit(412.895:34936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 412.952479][ T29] audit: type=1326 audit(412.895:34937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 412.976779][ T29] audit: type=1326 audit(412.895:34938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 413.001372][ T29] audit: type=1326 audit(412.895:34939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f600004f749 code=0x7ffc0000 [ 413.026458][ T29] audit: type=1326 audit(412.895:34940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f600004f783 code=0x7ffc0000 [ 413.051033][ T29] audit: type=1326 audit(412.895:34941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17759 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f600004e1ff code=0x7ffc0000 [ 413.374838][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 413.438712][T17765] netlink: 'syz.4.4673': attribute type 10 has an invalid length. [ 413.500186][T17766] netlink: 'syz.4.4673': attribute type 10 has an invalid length. [ 423.546602][ T4080] dummy0: left promiscuous mode [ 424.148194][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 424.148211][ T29] audit: type=1326 audit(424.125:35031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.181041][ T29] audit: type=1326 audit(424.155:35032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.205649][ T29] audit: type=1326 audit(424.155:35033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.230350][ T29] audit: type=1326 audit(424.155:35034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.257488][ T29] audit: type=1326 audit(424.225:35035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.282319][ T29] audit: type=1326 audit(424.235:35036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.306700][ T29] audit: type=1326 audit(424.235:35037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.331984][ T29] audit: type=1326 audit(424.235:35038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.356497][ T29] audit: type=1326 audit(424.235:35039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 424.384461][ T29] audit: type=1326 audit(424.355:35040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c06f749 code=0x7ffc0000 [ 425.891974][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4683'. [ 425.902496][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4683'. [ 425.915221][ T4599] tipc: Disabling bearer [ 425.917587][T17800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4683'. [ 425.933596][ T5519] tipc: Resetting bearer [ 425.954316][ T5519] tipc: Disabling bearer [ 426.453787][T17813] vlan0: entered allmulticast mode [ 426.460513][T17813] bridge_slave_0: entered allmulticast mode [ 426.473485][ T1906] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.506814][T17783] lo speed is unknown, defaulting to 1000 [ 426.537241][ T1906] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.638000][T17793] lo speed is unknown, defaulting to 1000 [ 426.637988][T17783] lo speed is unknown, defaulting to 1000 [ 426.651967][ T1906] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.666642][T17830] netlink: 'syz.4.4688': attribute type 1 has an invalid length. [ 426.698268][T17830] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.811503][T17832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.820050][T17832] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 426.833392][T17832] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 426.849811][ T1906] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.867253][T17793] lo speed is unknown, defaulting to 1000 [ 426.876804][T17830] gretap1: entered promiscuous mode [ 426.883866][T17830] bond8: (slave gretap1): making interface the new active one [ 426.906904][T17830] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 426.929020][T17834] macvlan0: entered promiscuous mode [ 426.934373][T17834] macvlan0: entered allmulticast mode [ 426.945774][T17834] bond8: entered promiscuous mode [ 426.957286][T17834] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 426.968894][T17834] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 426.982522][T17834] bond8: left promiscuous mode [ 427.073249][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4690'. [ 427.267244][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 427.469385][T17844] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4693'. [ 427.721006][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 427.761426][T17850] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4695'. [ 427.778673][T17844] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4693'. [ 427.857249][T17856] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 427.869166][ T1906] .` (unregistering): Released all slaves [ 427.878968][T17856] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.887536][ T1906] bond1 (unregistering): Released all slaves [ 427.905557][ T1906] bond2 (unregistering): Released all slaves [ 427.917704][ T1906] bond3 (unregistering): Released all slaves [ 427.937125][ T1906] bond0 (unregistering): Released all slaves [ 427.943344][T17856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.954597][ T1906] bond4 (unregistering): Released all slaves [ 427.974785][ T1906] bond5 (unregistering): Released all slaves [ 427.983679][ T1906] bond6 (unregistering): Released all slaves [ 428.056168][ T1906] tipc: Disabling bearer [ 428.061259][ T1906] tipc: Disabling bearer [ 428.066660][ T1906] tipc: Left network mode [ 428.078930][T17858] lo speed is unknown, defaulting to 1000 [ 428.119452][T17783] chnl_net:caif_netlink_parms(): no params data found [ 428.155876][T17858] lo speed is unknown, defaulting to 1000 [ 428.311412][T17783] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.318598][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.326166][T17783] bridge_slave_0: entered allmulticast mode [ 428.333308][T17783] bridge_slave_0: entered promiscuous mode [ 428.340017][T17793] chnl_net:caif_netlink_parms(): no params data found [ 428.351761][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.359139][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.366824][T17783] bridge_slave_1: entered allmulticast mode [ 428.373850][T17783] bridge_slave_1: entered promiscuous mode [ 428.413633][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.433558][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.478570][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.486130][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.493379][T17793] bridge_slave_0: entered allmulticast mode [ 428.502910][T17793] bridge_slave_0: entered promiscuous mode [ 428.512294][T17783] team0: Port device team_slave_0 added [ 428.521207][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.529911][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.539321][T17793] bridge_slave_1: entered allmulticast mode [ 428.548054][T17793] bridge_slave_1: entered promiscuous mode [ 428.557361][T17783] team0: Port device team_slave_1 added [ 428.600959][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.610431][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.639757][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.652369][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.664170][ T1906] IPVS: stop unused estimator thread 0... [ 428.671319][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.680124][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.709118][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.740706][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.775526][T17783] hsr_slave_0: entered promiscuous mode [ 428.784310][T17783] hsr_slave_1: entered promiscuous mode [ 428.800787][T17793] team0: Port device team_slave_0 added [ 428.815962][T17793] team0: Port device team_slave_1 added [ 428.841905][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.850322][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.878631][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.894906][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.902249][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.930518][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.994327][T17793] hsr_slave_0: entered promiscuous mode [ 429.092836][T17793] hsr_slave_1: entered promiscuous mode [ 429.100860][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 429.106847][T17793] Cannot create hsr debugfs directory [ 429.169249][T17783] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.197043][T17783] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.226105][T17783] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.249182][T17783] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.275535][T17905] lo speed is unknown, defaulting to 1000 [ 429.329368][T17905] lo speed is unknown, defaulting to 1000 [ 429.637828][ T1906] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 429.987423][ T1906] bond7 (unregistering): (slave bridge6): Releasing active interface [ 430.059388][ T1906] .` (unregistering): (slave ..@ÿ): Releasing backup interface [ 430.070367][ T1906] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.081070][ T1906] .` (unregistering): Released all slaves [ 430.090729][ T1906] bond1 (unregistering): Released all slaves [ 430.100743][ T1906] bond2 (unregistering): Released all slaves [ 430.110345][ T1906] bond3 (unregistering): Released all slaves [ 430.121085][ T1906] bond4 (unregistering): Released all slaves [ 430.134672][ T1906] bond5 (unregistering): (slave bond6): Releasing backup interface [ 430.149036][ T1906] bond5 (unregistering): Released all slaves [ 430.158216][ T1906] bond6 (unregistering): Released all slaves [ 430.168948][ T1906] bond7 (unregistering): Released all slaves [ 430.352570][T17783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.367675][T17793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 430.404238][T17793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.426979][T17783] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.436628][T17793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.453137][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.460700][ T4096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.477510][T17793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 430.504552][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.511762][ T4096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.530157][ T1906] tipc: Disabling bearer [ 430.535634][ T1906] tipc: Disabling bearer [ 430.541006][ T1906] tipc: Left network mode [ 430.555574][T17783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.568085][T17783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.695150][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.762423][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.824733][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.832220][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.896606][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.903823][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.216943][T17783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.240439][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 431.240457][ T29] audit: type=1326 audit(431.215:35831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.300134][ T29] audit: type=1326 audit(431.245:35832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.323736][ T29] audit: type=1326 audit(431.245:35833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.347077][ T29] audit: type=1326 audit(431.245:35834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.370301][ T29] audit: type=1326 audit(431.245:35835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.394091][ T29] audit: type=1326 audit(431.245:35836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.417674][ T29] audit: type=1326 audit(431.245:35837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 431.441131][ T29] audit: type=1326 audit(431.245:35838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb21b2df783 code=0x7ffc0000 [ 431.464007][ T29] audit: type=1326 audit(431.255:35839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb21b2de1ff code=0x7ffc0000 [ 431.487023][ T29] audit: type=1326 audit(431.255:35840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17948 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb21b2df7d7 code=0x7ffc0000 [ 431.572974][ T4096] smc: removing ib device syz! [ 431.579097][ T850] smc: removing ib device syz1 [ 431.586700][T17793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.894413][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.159047][T17978] $Hÿ: renamed from bond0 (while UP) [ 432.628951][T17978] $Hÿ: left allmulticast mode [ 432.773457][T17979] lo speed is unknown, defaulting to 1000 [ 432.821258][ T1906] IPVS: stop unused estimator thread 0... [ 432.828889][T17783] veth0_vlan: entered promiscuous mode [ 432.936820][T17783] veth1_vlan: entered promiscuous mode [ 432.976700][T17783] veth0_macvtap: entered promiscuous mode [ 432.990291][T17783] veth1_macvtap: entered promiscuous mode [ 433.002051][T17783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.015957][T17783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.052199][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4721'. [ 433.137142][ T850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.172307][ T850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.240363][ T850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.300483][T17793] veth0_vlan: entered promiscuous mode [ 433.309124][ T850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.345986][T17793] veth1_vlan: entered promiscuous mode [ 433.382706][T17793] veth0_macvtap: entered promiscuous mode [ 433.394231][T17793] veth1_macvtap: entered promiscuous mode [ 433.414221][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4680'. [ 433.429239][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.449414][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.486450][ T850] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.537871][ T850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.550868][ T1906] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.560639][ T1906] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.610423][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4681'. [ 433.847827][T18017] lo speed is unknown, defaulting to 1000 [ 434.338144][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4727'. [ 434.384638][T18027] loop5: detected capacity change from 0 to 1024 [ 434.393506][T18027] EXT4-fs: Ignoring removed oldalloc option [ 434.399751][T18027] EXT4-fs: Ignoring removed bh option [ 434.417752][T18027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.473582][T18027] netlink: 'syz.5.4728': attribute type 4 has an invalid length. [ 434.511330][T17783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.530183][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'. [ 434.783595][T18040] Set syz1 is full, maxelem 65536 reached [ 434.966568][T18046] lo speed is unknown, defaulting to 1000 [ 435.067097][T18046] loop5: detected capacity change from 0 to 1024 [ 435.074680][T18046] EXT4-fs: Ignoring removed bh option [ 435.139612][T18046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.161345][T18046] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.4734: lblock 3 mapped to illegal pblock 3 (length 3) [ 435.176272][T18046] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 435.189014][T18046] EXT4-fs (loop5): This should not happen!! Data will be lost [ 435.189014][T18046] [ 435.738414][ T1906] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 435.834592][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4741'. [ 435.844650][ T1906] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 435.857972][ T1906] EXT4-fs (loop5): This should not happen!! Data will be lost [ 435.857972][ T1906] [ 435.922559][T17783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 436.268051][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4742'. [ 436.444910][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 436.444931][ T29] audit: type=1326 audit(436.405:36032): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18072 comm="syz.3.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 436.475760][ T29] audit: type=1326 audit(436.405:36033): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18072 comm="syz.3.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 436.515310][ T29] audit: type=1326 audit(436.475:36034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.539745][ T29] audit: type=1326 audit(436.475:36035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.562862][ T29] audit: type=1326 audit(436.475:36036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.587293][ T29] audit: type=1326 audit(436.475:36037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.611741][ T29] audit: type=1326 audit(436.485:36038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.637191][ T29] audit: type=1326 audit(436.485:36039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.661027][ T29] audit: type=1326 audit(436.485:36040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f0f749 code=0x7ffc0000 [ 436.685015][ T29] audit: type=1326 audit(436.485:36041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.5.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d4f11667 code=0x7ffc0000 [ 436.785187][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4750'. [ 436.940397][T18101] netlink: 'syz.0.4754': attribute type 11 has an invalid length. [ 437.019521][T18107] gretap0: entered promiscuous mode [ 437.024847][T18107] gretap0: entered allmulticast mode [ 437.040317][T18110] loop6: detected capacity change from 0 to 512 [ 437.047060][T18110] EXT4-fs: Ignoring removed i_version option [ 437.053227][T18110] EXT4-fs: Ignoring removed bh option [ 437.068347][T18110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.184447][T18123] netlink: 4412 bytes leftover after parsing attributes in process `syz.4.4761'. [ 437.215054][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4762'. [ 437.260218][T17793] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.319228][T18130] program syz.6.4763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.794989][T18153] lo speed is unknown, defaulting to 1000 [ 438.259430][T18157] __nla_validate_parse: 1 callbacks suppressed [ 438.259464][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4772'. [ 438.342517][T18161] netlink: 'syz.5.4772': attribute type 10 has an invalid length. [ 438.350594][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4772'. [ 438.464375][T18161] batman_adv: batadv0: Adding interface: veth1_vlan [ 438.471705][T18161] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.505453][T18161] batman_adv: batadv0: Interface activated: veth1_vlan [ 438.575009][T18165] lo speed is unknown, defaulting to 1000 [ 439.363358][T18175] gretap1: left promiscuous mode [ 439.393873][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4779'. [ 439.419603][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.437940][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'. [ 439.450198][T18179] bridge_slave_1 (unregistering): left allmulticast mode [ 439.458096][T18179] bridge_slave_1 (unregistering): left promiscuous mode [ 439.465195][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.872135][T18200] loop5: detected capacity change from 0 to 512 [ 439.879041][T18200] EXT4-fs: quotafile must be on filesystem root [ 440.340932][T18202] lo speed is unknown, defaulting to 1000 [ 440.421802][T18206] pimreg: entered allmulticast mode [ 440.453063][T18206] pimreg: left allmulticast mode [ 441.161315][T18211] lo speed is unknown, defaulting to 1000 [ 441.447445][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 441.447461][ T29] audit: type=1326 audit(441.425:36679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 441.449523][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4793'. [ 441.464213][ T29] audit: type=1326 audit(441.425:36680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb21b2d65e7 code=0x7ffc0000 [ 441.509707][ T29] audit: type=1326 audit(441.425:36681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb21b27b829 code=0x7ffc0000 [ 441.532726][ T29] audit: type=1326 audit(441.425:36682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 441.556046][ T29] audit: type=1326 audit(441.435:36683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 441.580714][ T29] audit: type=1326 audit(441.435:36684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb21b2d65e7 code=0x7ffc0000 [ 441.604705][ T29] audit: type=1326 audit(441.435:36685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb21b27b829 code=0x7ffc0000 [ 441.627625][ T29] audit: type=1326 audit(441.435:36686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb21b2df749 code=0x7ffc0000 [ 441.671596][T18231] lo speed is unknown, defaulting to 1000 [ 441.862703][T18229] netlink: 'syz.4.4794': attribute type 11 has an invalid length. [ 442.133875][ T29] audit: type=1326 audit(441.455:36687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb21b2d65e7 code=0x7ffc0000 [ 442.157456][ T29] audit: type=1326 audit(441.455:36688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb21b27b829 code=0x7ffc0000 [ 442.541919][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4798'. [ 442.609607][T18240] can0: slcan on ttyS3. [ 442.685609][T18240] can0 (unregistered): slcan off ttyS3. [ 442.821620][T18264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18264 comm=syz.6.4804 [ 443.166697][T18268] lo speed is unknown, defaulting to 1000 [ 443.392307][T18277] loop5: detected capacity change from 0 to 1024 [ 443.407982][T18277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.510849][T18277] ================================================================== [ 443.519161][T18277] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 443.527383][T18277] [ 443.529717][T18277] write to 0xffff88811b0aa5cc of 4 bytes by task 18281 on cpu 0: [ 443.537754][T18277] xas_set_mark+0x12b/0x140 [ 443.543092][T18277] tag_pages_for_writeback+0xc2/0x290 [ 443.548516][T18277] ext4_do_writepages+0x6a8/0x27e0 [ 443.553824][T18277] ext4_writepages+0x179/0x300 [ 443.558627][T18277] do_writepages+0x1c6/0x310 [ 443.563333][T18277] file_write_and_wait_range+0x156/0x2c0 [ 443.569348][T18277] generic_buffers_fsync_noflush+0x45/0x130 [ 443.575365][T18277] ext4_sync_file+0x1ab/0x690 [ 443.580347][T18277] vfs_fsync_range+0x10d/0x130 [ 443.585232][T18277] ext4_buffered_write_iter+0x34f/0x3c0 [ 443.590813][T18277] ext4_file_write_iter+0x387/0xf60 [ 443.596237][T18277] iter_file_splice_write+0x66b/0xa20 [ 443.601886][T18277] direct_splice_actor+0x156/0x2a0 [ 443.607011][T18277] splice_direct_to_actor+0x312/0x680 [ 443.612912][T18277] do_splice_direct+0xda/0x150 [ 443.617693][T18277] do_sendfile+0x380/0x650 [ 443.622120][T18277] __x64_sys_sendfile64+0x105/0x150 [ 443.627327][T18277] x64_sys_call+0x2db1/0x3000 [ 443.632158][T18277] do_syscall_64+0xca/0x2b0 [ 443.636677][T18277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.642577][T18277] [ 443.644897][T18277] read to 0xffff88811b0aa5cc of 4 bytes by task 18277 on cpu 1: [ 443.653016][T18277] file_write_and_wait_range+0x10e/0x2c0 [ 443.658656][T18277] generic_buffers_fsync_noflush+0x45/0x130 [ 443.664560][T18277] ext4_sync_file+0x1ab/0x690 [ 443.669338][T18277] vfs_fsync_range+0x10d/0x130 [ 443.674118][T18277] ext4_buffered_write_iter+0x34f/0x3c0 [ 443.679678][T18277] ext4_file_write_iter+0x387/0xf60 [ 443.685208][T18277] iter_file_splice_write+0x66b/0xa20 [ 443.690862][T18277] direct_splice_actor+0x156/0x2a0 [ 443.696158][T18277] splice_direct_to_actor+0x312/0x680 [ 443.701813][T18277] do_splice_direct+0xda/0x150 [ 443.706686][T18277] do_sendfile+0x380/0x650 [ 443.711287][T18277] __x64_sys_sendfile64+0x105/0x150 [ 443.716587][T18277] x64_sys_call+0x2db1/0x3000 [ 443.721291][T18277] do_syscall_64+0xca/0x2b0 [ 443.726205][T18277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.732245][T18277] [ 443.734853][T18277] value changed: 0x02000021 -> 0x04000021 [ 443.740846][T18277] [ 443.743534][T18277] Reported by Kernel Concurrency Sanitizer on: [ 443.749782][T18277] CPU: 1 UID: 0 PID: 18277 Comm: syz.5.4808 Tainted: G W syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 443.761600][T18277] Tainted: [W]=WARN [ 443.765579][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.775809][T18277] ================================================================== [ 443.828032][T18284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4809'. [ 443.841394][T18284] lo speed is unknown, defaulting to 1000 [ 443.848295][T18284] lo speed is unknown, defaulting to 1000 [ 443.854766][T18284] lo speed is unknown, defaulting to 1000 [ 444.135475][T18284] infiniband syz1: set down [ 444.140030][T18284] infiniband syz1: added lo [ 444.144658][ T36] lo speed is unknown, defaulting to 1000 [ 444.145702][T18284] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 444.150652][T18284] infiniband syz1: Couldn't open port 1 [ 444.168623][T18284] RDS/IB: syz1: added [ 444.172638][T18284] smc: adding ib device syz1 with port count 1 [ 444.179081][T18284] smc: ib device syz1 port 1 has no pnetid [ 444.185410][T18003] lo speed is unknown, defaulting to 1000 [ 444.191301][T18284] lo speed is unknown, defaulting to 1000 [ 444.221788][T18284] lo speed is unknown, defaulting to 1000 [ 444.257543][T18284] lo speed is unknown, defaulting to 1000 [ 444.259043][T18282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.291446][T18284] lo speed is unknown, defaulting to 1000 [ 444.311570][ T4099] bond7 (unregistering): (slave ip6gretap0): Releasing active interface [ 444.320170][ T4099] bond7 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - f2:84:33:f1:19:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 444.339824][ T4099] ip6gretap0 (unregistering): left promiscuous mode [ 444.364524][ T4099] bond6 (unregistering): (slave geneve2): Releasing active interface [ 444.486468][ T4099] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 444.546464][ T4099] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 444.706783][ T4099] .` (unregistering): Released all slaves [ 444.714943][ T4099] bond1 (unregistering): Released all slaves [ 444.723800][ T4099] bond2 (unregistering): (slave veth11): Releasing active interface [ 444.732657][ T4099] bond2 (unregistering): Released all slaves [ 444.740962][ T4099] bond3 (unregistering): Released all slaves [ 444.751860][ T4099] bond9 (unregistering): (slave bond0): Releasing backup interface [ 444.761456][ T4099] bond0 (unregistering): (slave veth1): Releasing active interface [ 444.770615][ T4099] bond0 (unregistering): (slave veth13): Releasing active interface [ 444.779062][ T4099] bond0 (unregistering): Released all slaves [ 444.787778][ T4099] bond4 (unregistering): Released all slaves [ 444.797145][ T4099] bond5 (unregistering): (slave veth15): Releasing active interface [ 444.806165][ T4099] bond5 (unregistering): Released all slaves [ 444.814521][ T4099] bond6 (unregistering): Released all slaves [ 444.823161][ T4099] bond7 (unregistering): (slave veth17): Releasing active interface [ 444.831791][ T4099] bond7 (unregistering): Released all slaves [ 444.840253][ T4099] bond8 (unregistering): Released all slaves [ 444.849088][ T4099] bond9 (unregistering): Released all slaves [ 444.857004][T18284] lo speed is unknown, defaulting to 1000 [ 444.931623][ T4099] tipc: Disabling bearer [ 444.937129][ T4099] tipc: Left network mode [ 444.964811][ T4099] hsr_slave_0: left promiscuous mode [ 444.970887][ T4099] hsr_slave_1: left promiscuous mode [ 445.218069][ T4099] IPVS: stop unused estimator thread 0... [ 445.279311][ T4099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.337932][ T4099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.407795][ T4099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.457886][ T4099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.550726][ T4099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.608009][ T4099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.647819][ T4099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.687641][ T4099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.938024][ T4099] bridge_slave_0: left allmulticast mode [ 445.943890][ T4099] bridge_slave_0: left promiscuous mode [ 445.949773][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.958560][ T4099] bridge_slave_1: left allmulticast mode [ 445.964320][ T4099] bridge_slave_1: left promiscuous mode [ 445.970216][ T4099] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.978245][ T4099] bridge_slave_0: left allmulticast mode [ 445.983883][ T4099] bridge_slave_0: left promiscuous mode [ 445.989897][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.078259][ T4099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.088165][ T4099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.097934][ T4099] bond0 (unregistering): Released all slaves [ 446.167362][ T4099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.177221][ T4099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.186840][ T4099] bond0 (unregistering): Released all slaves [ 446.197993][ T4099] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 446.209719][ T4099] bond5 (unregistering): (slave ip6gretap0): Releasing active interface [ 446.233008][ T4099] bond8 (unregistering): (slave gretap1): Releasing active interface [ 446.336532][ T4099] bond6 (unregistering): (slave bridge3): Releasing active interface [ 446.426698][ T4099] bond1 (unregistering): Released all slaves [ 446.435459][ T4099] bond2 (unregistering): Released all slaves [ 446.443739][ T4099] bond0 (unregistering): Released all slaves [ 446.451888][ T4099] bond3 (unregistering): Released all slaves [ 446.460525][ T4099] bond4 (unregistering): (slave veth7): Releasing active interface [ 446.469250][ T4099] bond4 (unregistering): Released all slaves [ 446.477557][ T4099] bond5 (unregistering): Released all slaves [ 446.485472][ T4099] bond6 (unregistering): Released all slaves [ 446.494027][ T4099] bond7 (unregistering): (slave lo): Releasing backup interface [ 446.502230][ T4099] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 446.513949][ T4099] bond7 (unregistering): Released all slaves [ 446.522330][ T4099] bond8 (unregistering): Released all slaves [ 446.561026][ T4099] tipc: Disabling bearer [ 446.566088][ T4099] tipc: Left network mode [ 446.618346][ T4099] hsr_slave_0: left promiscuous mode [ 446.624088][ T4099] hsr_slave_1: left promiscuous mode [ 446.630780][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.638475][ T4099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.646916][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.654672][ T4099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.662956][ T4099] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 446.670399][ T4099] batman_adv: batadv0: Removing interface: veth1_vlan [ 446.679270][ T4099] hsr_slave_0: left promiscuous mode [ 446.684970][ T4099] hsr_slave_1: left promiscuous mode [ 446.690663][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.698261][ T4099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.705914][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.713461][ T4099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.725671][ T4099] veth1_macvtap: left promiscuous mode [ 446.731312][ T4099] veth0_macvtap: left promiscuous mode [ 446.737521][ T4099] veth1_vlan: left promiscuous mode [ 446.742843][ T4099] veth0_vlan: left promiscuous mode [ 446.748608][ T4099] veth1_vlan: left promiscuous mode [ 446.753854][ T4099] veth0_vlan: left promiscuous mode [ 446.840851][ T4099] team0 (unregistering): Port device team_slave_1 removed [ 446.850736][ T4099] team0 (unregistering): Port device team_slave_0 removed [ 446.898567][ T4099] team0 (unregistering): Port device team_slave_1 removed [ 446.909150][ T4099] team0 (unregistering): Port device team_slave_0 removed [ 446.946090][ T4099] pim6reg9 (unregistering): left allmulticast mode [ 447.490763][ T4099] IPVS: stop unused estimator thread 0...