last executing test programs: 3m14.970072846s ago: executing program 4 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) timer_create(0x3, 0x0, &(0x7f00000002c0)=<r0=>0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000480)) 3m14.969782486s ago: executing program 4 (id=1188): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'wg2\x00', @remote}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 3m14.519810039s ago: executing program 4 (id=1195): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x11, 0x5, 0x1, 0x3fc00, 0x1, 0x0, [{0x2b7, 0x0, 0x8000000000000001, '\x00', 0x3008}]}) 3m14.277700262s ago: executing program 4 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 3m14.147369472s ago: executing program 4 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000400)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0xf, 0x0, 0x2, 0x0}) 3m11.036780086s ago: executing program 1 (id=1274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) 3m11.008115836s ago: executing program 1 (id=1275): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r2, r1, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) 3m11.007679926s ago: executing program 1 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) inotify_init1(0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101021800168014000300fe8000000000000000000000000000aa0600150004"], 0x4c}}, 0x0) 3m10.993212536s ago: executing program 1 (id=1277): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d3000636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d67696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c726f64ed72caee686f72746e616d653d6c6f7765722c00"], 0xfd, 0x29c, &(0x7f0000000ac0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xc200, 0x90759d0ca75742f4) fadvise64(r0, 0x0, 0x3f00, 0x4) 3m10.951353396s ago: executing program 4 (id=1278): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'wg2\x00', @remote}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 3m10.945244376s ago: executing program 1 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 3m10.935478756s ago: executing program 32 (id=1278): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'wg2\x00', @remote}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 3m6.987679546s ago: executing program 1 (id=1344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m6.959178866s ago: executing program 33 (id=1344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m58.929804586s ago: executing program 5 (id=1627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000000b0601010000000001000000030000000900020073797a310000000005000100070000003c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff04000880"], 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 2m58.835304807s ago: executing program 5 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) 2m58.778803978s ago: executing program 5 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(0x0, 0x0) 2m58.702642989s ago: executing program 5 (id=1636): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) 2m58.47748657s ago: executing program 5 (id=1641): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) sendfile(r0, r0, 0x0, 0xb) copy_file_range(r0, &(0x7f0000000100)=0xf0, r0, 0x0, 0x9, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 2m56.810838623s ago: executing program 5 (id=1686): mq_open(0x0, 0x42, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 2m56.775465153s ago: executing program 34 (id=1686): mq_open(0x0, 0x42, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 2m15.63035119s ago: executing program 0 (id=2980): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 2m15.62984758s ago: executing program 0 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf25040017"], 0x30}}, 0x44880) 2m15.60084083s ago: executing program 0 (id=2982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000040000000000000000040000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m15.60018187s ago: executing program 0 (id=2983): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m15.350270522s ago: executing program 0 (id=2985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b5", 0x5}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x304}, "14faba49e6bd071c", "ae2a0ceb462c0a428866224127b9391e", "4e942123", "9c80e048be003f85"}, 0x28) 2m14.942754265s ago: executing program 0 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r3=>0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x2, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m14.942451965s ago: executing program 35 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r3=>0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x2, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m14.001223842s ago: executing program 7 (id=3010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2m13.983054172s ago: executing program 7 (id=3011): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x0, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@nodioread_nolock}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 2m13.481535376s ago: executing program 7 (id=3013): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 2m13.443414356s ago: executing program 7 (id=3015): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m13.115883778s ago: executing program 7 (id=3021): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e63a", 0x2, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/141, 0x8d}], 0x1}, 0x2}], 0x1, 0x20, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m12.720380202s ago: executing program 7 (id=3035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4082, 0xff2}, 0x80181}], 0x1, 0x120, 0x0) 2m12.720091102s ago: executing program 36 (id=3035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4082, 0xff2}, 0x80181}], 0x1, 0x120, 0x0) 2.278419283s ago: executing program 8 (id=5868): r0 = socket(0x1e, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24008000) syz_genetlink_get_family_id$tipc2(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 1.638756058s ago: executing program 9 (id=5886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setns(r1, 0x80) r2 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r2, 0x0, 0x41) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1.632408178s ago: executing program 2 (id=5887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r4, &(0x7f0000000780)="fb", 0x1) 1.610347178s ago: executing program 2 (id=5889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r6=>0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 1.605935148s ago: executing program 9 (id=5890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x48) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24040000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.457955719s ago: executing program 2 (id=5894): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000004c0)='./bus\x00', 0x6a) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.427880519s ago: executing program 8 (id=5897): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) r0 = getpid() setreuid(0xee00, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setns(r3, 0x24020000) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 1.38223411s ago: executing program 2 (id=5899): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x1000000, 0x40, 0x4}, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000001c00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.36767981s ago: executing program 3 (id=5900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x7, r4, 0x1, 0xdf, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x2c, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r4, {0x1f, 0x3}}, [{0x8, 0xb, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000854) 1.35583231s ago: executing program 8 (id=5901): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 1.268907811s ago: executing program 8 (id=5902): epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 1.268561331s ago: executing program 9 (id=5903): r0 = inotify_init() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.251840901s ago: executing program 3 (id=5904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5401000010001307000000000000000064010100000000000000000000000000ac14143f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000050000000022a195215a6a21", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x8, 0x11, 0x1, @empty, @mcast2, {[], {0x4e20, 0x4e20, 0x8}}}}}}}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) 1.236031341s ago: executing program 2 (id=5905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x100) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback, 0xa7a}, 0x1c) 1.224949841s ago: executing program 9 (id=5906): socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') acct(&(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.126337512s ago: executing program 3 (id=5907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.125447292s ago: executing program 3 (id=5908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.113084412s ago: executing program 9 (id=5909): socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xd) r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='tlb_flush\x00', r1, 0x0, 0x3}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f000065d000/0x1000)=nil) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000011) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x4002, 0x0, 0x9) 552.670356ms ago: executing program 9 (id=5910): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x1004000000000000}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000040)=ANY=[@ANYBLOB="00cac985380e67f4ddc1c7d8ba99cbd67822cad9c1d5a34b67d142033500"]}, &(0x7f0000000400)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e480000000f6d8387d35c4d8370660bb1f52cf0b4c3248857162b22f05e8a35e51980b92ee592c115c7e8087ee3edfdc09e03d48d23ee0e"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x0, 0xe2, {0xe0, "8546c826f1c63853005bbe7736a728a1a38b0712e64b420356a1d50a37acaed2f513eeb8db0b10d51fb8b5746357927550ac6bd7e6be51ba1fdefa5bae24da7ae3a5577dd8249aaa1d8a53784629cf85f05d15a1fd27811db3f98da9d2b4c3bd5f1645f77153905fce72d489ef5b7c665301e9cb56cde93f726e291774a7189239220444ce4a739d5545ef0b33332d3026619d2fc521c829a7c955601adf907734a613f4506087d798c0ca7e44970f3b1387eff33e41adb9945ebc5fd7b917cca98b615618da7b43097407ef36ee838dcdf7c2d39fe4f0c5e948c6a8d00a990a"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) memfd_create(&(0x7f0000001480)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\a\x00\x00\x00,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2y\xc8W\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bO\xf0\x1ab\x96\xcf\xbb\x15\xcf\xfcNm\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xfa\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xean\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1L9p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xeb;lb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x02\x00\x00\x00\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13', 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0xc, 0x8, &(0x7f0000000800)}) 454.768807ms ago: executing program 6 (id=5911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1843, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 396.659257ms ago: executing program 6 (id=5912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r1, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}}, 0x28}}, 0x0) 380.048987ms ago: executing program 8 (id=5913): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 207.421779ms ago: executing program 3 (id=5914): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 205.601139ms ago: executing program 8 (id=5924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x100}, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0xfffffffc}, @timestamp], 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000014c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0xffffff2f, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000600)="51678bb32fac3a0f648837ff040d45b94543c6c1435a75109ba62eb487d0be9775d416832d12c04618148267d0b6b80188f839fc8f42405772e668d0786551002422ce868d0b854b1510f042ee2d3b8fd74cd3435b571e34db613d2d27c7e3c2a629f55d1c95cba3104826875ac4a61636f31a1ea64c6d9de7e0832b56ffec0afd36cd6727f69e62107fddc42f042c72b99440fd8852f577d620eebdd044d886952e34", &(0x7f00000009c0)=""/82}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 204.634528ms ago: executing program 6 (id=5915): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000458}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3e}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000280)={0x6, 0x0, 0x1, 0x0, 0x83, 0x7}) 144.808659ms ago: executing program 6 (id=5916): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) socket$inet_udp(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 138.907759ms ago: executing program 2 (id=5917): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000d00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) 120.126869ms ago: executing program 6 (id=5918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0xf, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 113.434869ms ago: executing program 3 (id=5919): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 0s ago: executing program 6 (id=5920): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x27a, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=41 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 219.412575][ T30] audit: type=1326 audit(1742110250.181:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.9.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 219.731474][T15607] pim6reg1: entered promiscuous mode [ 219.736823][T15607] pim6reg1: entered allmulticast mode [ 219.932537][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.940008][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.947457][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.954896][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.962393][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.969949][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.977383][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.984887][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.992391][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 219.999937][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.007349][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.014799][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.022216][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.029635][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.037088][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.044601][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.052054][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.059507][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.066981][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.074431][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.081862][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.089402][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.096796][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.104267][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.111739][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.119143][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.126572][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.133985][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.141504][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.149082][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.156559][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.159462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.163990][ T3387] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 220.178885][ T3387] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0 [ 220.294995][T15627] Cannot find add_set index 0 as target [ 220.399472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.603390][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 220.627808][T15644] serio: Serial port ptm0 [ 220.658646][T15648] macvtap0: left allmulticast mode [ 220.663903][T15648] veth0_macvtap: left allmulticast mode [ 220.669714][T15648] macvtap0: left promiscuous mode [ 220.766029][T15673] pim6reg1: entered promiscuous mode [ 220.771510][T15673] pim6reg1: entered allmulticast mode [ 220.799237][T15677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4949'. [ 221.199453][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.429435][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.511374][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.518893][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.526422][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.533911][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.541350][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.548736][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.556289][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.563786][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.571243][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.578740][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.586313][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.593825][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.601314][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.609009][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.616489][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.623973][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.631416][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.638824][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.646355][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.653836][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.661324][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.668793][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.676251][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.683662][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.691112][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.698561][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.706047][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.711943][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4960'. [ 221.713465][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.729745][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.737196][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.744638][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.752066][ T3376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 221.759981][ T3376] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0 [ 221.821669][T15712] loop8: detected capacity change from 0 to 512 [ 221.831118][T15712] EXT4-fs (loop8): orphan cleanup on readonly fs [ 221.838058][T15712] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4962: bg 0: block 248: padding at end of block bitmap is not set [ 221.840780][T15715] syz_tun: entered allmulticast mode [ 221.853719][T15712] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4962: Failed to acquire dquot type 1 [ 221.864762][T15715] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 221.870214][T15712] EXT4-fs (loop8): 1 truncate cleaned up [ 221.877556][T15715] mroute: pending queue full, dropping entries [ 221.884479][T15712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.896174][T15714] syz_tun: left allmulticast mode [ 221.910954][T15712] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.920836][T15712] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.980912][T15712] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.990807][T15712] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.061442][T15712] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.071418][T15712] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.111087][T15712] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.111126][T15712] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.167777][T15712] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.176060][T15712] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.187987][T15712] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.196282][T15712] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.208277][T15712] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.216616][T15712] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.229446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.232541][T15712] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.244808][T15712] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.279199][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.291283][T15729] Cannot find add_set index 0 as target [ 222.615158][T15553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.643007][T15553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.672962][T15553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.692501][T15553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.711440][T15744] loop9: detected capacity change from 0 to 128 [ 222.810397][T15745] bio_check_eod: 22543 callbacks suppressed [ 222.810413][T15745] syz.9.4976: attempt to access beyond end of device [ 222.810413][T15745] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 222.872260][T15744] syz.9.4976: attempt to access beyond end of device [ 222.872260][T15744] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 222.886584][T15744] syz.9.4976: attempt to access beyond end of device [ 222.886584][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.915150][T15744] syz.9.4976: attempt to access beyond end of device [ 222.915150][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.930727][T15745] syz.9.4976: attempt to access beyond end of device [ 222.930727][T15745] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.959423][T15744] syz.9.4976: attempt to access beyond end of device [ 222.959423][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.974113][T15745] syz.9.4976: attempt to access beyond end of device [ 222.974113][T15745] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 223.004962][T15744] syz.9.4976: attempt to access beyond end of device [ 223.004962][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 223.034207][T15755] program syz.2.4981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.037411][T15744] syz.9.4976: attempt to access beyond end of device [ 223.037411][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 223.060579][T15744] syz.9.4976: attempt to access beyond end of device [ 223.060579][T15744] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 223.112368][T15762] veth0_vlan: entered allmulticast mode [ 223.151071][T15762] ������: renamed from vlan1 [ 223.192266][T15768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.437914][T15796] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4992'. [ 223.457863][T15783] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4992'. [ 223.491012][T15798] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5001'. [ 223.509418][ C0] net_ratelimit: 2 callbacks suppressed [ 223.509436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.562244][T15802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.602877][T15807] loop9: detected capacity change from 0 to 512 [ 223.651735][T15809] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 223.659754][T15808] tipc: Resetting bearer <eth:syzkaller0> [ 223.669721][T15807] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.674757][T15813] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 223.688687][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.696332][T15813] vhci_hcd vhci_hcd.0: Device attached [ 223.697754][T15807] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.723280][T15808] tipc: Disabling bearer <eth:syzkaller0> [ 223.797241][T15815] vhci_hcd: connection closed [ 223.799860][ T4777] vhci_hcd: stop threads [ 223.808898][ T4777] vhci_hcd: release socket [ 223.813440][ T4777] vhci_hcd: disconnect device [ 223.849553][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.962097][T15827] syzkaller0: entered promiscuous mode [ 223.967607][T15827] syzkaller0: entered allmulticast mode [ 224.107841][T15834] loop9: detected capacity change from 0 to 2048 [ 224.120415][T15834] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 224.128776][T15834] System zones: 0-4 [ 224.133757][T15834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.146263][T15834] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.246119][T15839] serio: Serial port ptm0 [ 224.305872][T15837] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5014: bg 0: block 345: padding at end of block bitmap is not set [ 224.310629][T15841] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.320250][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.357258][T15837] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 224.369946][T15837] EXT4-fs (loop9): This should not happen!! Data will be lost [ 224.369946][T15837] [ 224.412649][T15849] SELinux: syz.3.5019 (15849) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 224.433545][ T6238] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 224.446360][ T6238] EXT4-fs (loop9): This should not happen!! Data will be lost [ 224.446360][ T6238] [ 224.482358][ T6238] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 224.482492][T15841] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.495121][ T6238] EXT4-fs (loop9): This should not happen!! Data will be lost [ 224.495121][ T6238] [ 224.514700][ T6238] EXT4-fs (loop9): Total free blocks count 0 [ 224.520945][ T6238] EXT4-fs (loop9): Free/Dirty block details [ 224.526860][ T6238] EXT4-fs (loop9): free_blocks=0 [ 224.557952][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.568540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.581009][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.591124][T15841] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.605266][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 224.605281][ T30] audit: type=1400 audit(1742110255.501:5362): avc: denied { accept } for pid=15855 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.655412][ T30] audit: type=1400 audit(1742110255.551:5363): avc: denied { write } for pid=15861 comm="syz.8.5025" path="socket:[61460]" dev="sockfs" ino=61460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.680862][ T30] audit: type=1326 audit(1742110255.551:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.704519][ T30] audit: type=1326 audit(1742110255.551:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.728104][ T30] audit: type=1326 audit(1742110255.551:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.751623][ T30] audit: type=1326 audit(1742110255.551:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.775209][ T30] audit: type=1326 audit(1742110255.551:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.798746][ T30] audit: type=1326 audit(1742110255.551:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.822359][ T30] audit: type=1326 audit(1742110255.551:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.845884][ T30] audit: type=1326 audit(1742110255.551:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15863 comm="syz.9.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 224.867534][T15841] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.945981][T15841] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.957751][T15841] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.968507][T15841] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.980304][T15841] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.349478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.417069][T15895] syzkaller0: entered promiscuous mode [ 225.422856][T15895] syzkaller0: entered allmulticast mode [ 225.589482][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.716567][T15912] Invalid ELF header magic: != ELF [ 225.944318][T15914] loop8: detected capacity change from 0 to 128 [ 225.975134][T15885] syz.3.5036 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 225.986241][T15885] CPU: 1 UID: 0 PID: 15885 Comm: syz.3.5036 Tainted: G W 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 225.986278][T15885] Tainted: [W]=WARN [ 225.986286][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.986302][T15885] Call Trace: [ 225.986310][T15885] <TASK> [ 225.986318][T15885] dump_stack_lvl+0xf2/0x150 [ 225.986427][T15885] dump_stack+0x15/0x1a [ 225.986494][T15885] dump_header+0x83/0x2d0 [ 225.986533][T15885] oom_kill_process+0x341/0x4c0 [ 225.986635][T15885] out_of_memory+0x9af/0xbe0 [ 225.986676][T15885] ? css_next_descendant_pre+0x11c/0x140 [ 225.986705][T15885] mem_cgroup_out_of_memory+0x13e/0x190 [ 225.986749][T15885] try_charge_memcg+0x508/0x7f0 [ 225.986776][T15885] charge_memcg+0x50/0xc0 [ 225.986830][T15885] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 225.986862][T15885] __read_swap_cache_async+0x236/0x480 [ 225.986967][T15885] swap_cluster_readahead+0x381/0x3f0 [ 225.987013][T15885] swapin_readahead+0xe4/0x6f0 [ 225.987049][T15885] ? __rcu_read_unlock+0x34/0x70 [ 225.987077][T15885] ? swap_cache_get_folio+0x77/0x210 [ 225.987139][T15885] do_swap_page+0x31b/0x2550 [ 225.987181][T15885] ? __rcu_read_lock+0x36/0x50 [ 225.987236][T15885] ? __pfx_default_wake_function+0x10/0x10 [ 225.987271][T15885] handle_mm_fault+0x8e4/0x2ac0 [ 225.987330][T15885] exc_page_fault+0x3b9/0x650 [ 225.987363][T15885] asm_exc_page_fault+0x26/0x30 [ 225.987392][T15885] RIP: 0033:0x7f48840b4f36 [ 225.987420][T15885] Code: 03 00 00 48 8d b9 08 03 00 00 89 d6 83 ce 02 39 d6 74 21 89 d0 f0 0f b1 37 89 c6 75 1b 83 e2 3b 83 ca 02 83 fa 0a 74 14 89 f0 <c3> 66 0f 1f 84 00 00 00 00 00 89 d6 eb f0 89 c2 eb ce 50 48 c7 81 [ 225.987515][T15885] RSP: 002b:00007fffea27dc48 EFLAGS: 00010293 [ 225.987531][T15885] RAX: 0000000000000000 RBX: 00007f48842a5fa0 RCX: 00005555876c2500 [ 225.987546][T15885] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00005555876c2808 [ 225.987586][T15885] RBP: 00007f48842a7ba0 R08: 00000000387212a4 R09: 7fffffffffffffff [ 225.987598][T15885] R10: 0000000000000000 R11: 0000000000000010 R12: 00000000000372e4 [ 225.987638][T15885] R13: 00007f48842a6080 R14: ffffffffffffffff R15: 00007fffea27ddd0 [ 225.987660][T15885] </TASK> [ 225.987667][T15885] memory: usage 307200kB, limit 307200kB, failcnt 263 [ 226.205390][T15885] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 226.213352][T15885] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 226.220683][T15885] Memory cgroup stats for /syz3: [ 226.220859][T15885] cache 0 [ 226.228731][T15885] rss 0 [ 226.231539][T15885] shmem 0 [ 226.234486][T15885] mapped_file 0 [ 226.238035][T15885] dirty 0 [ 226.241072][T15885] writeback 0 [ 226.244367][T15885] workingset_refault_anon 31355 [ 226.249227][T15885] workingset_refault_file 487 [ 226.253947][T15885] swap 364544 [ 226.257235][T15885] swapcached 0 [ 226.260636][T15885] pgpgin 369029 [ 226.264099][T15885] pgpgout 369029 [ 226.267653][T15885] pgfault 387953 [ 226.271282][T15885] pgmajfault 4075 [ 226.274934][T15885] inactive_anon 0 [ 226.278633][T15885] active_anon 0 [ 226.282123][T15885] inactive_file 0 [ 226.285831][T15885] active_file 0 [ 226.289298][T15885] unevictable 0 [ 226.292861][T15885] hierarchical_memory_limit 314572800 [ 226.298238][T15885] hierarchical_memsw_limit 9223372036854771712 [ 226.304457][T15885] total_cache 0 [ 226.307954][T15885] total_rss 0 [ 226.311445][T15885] total_shmem 0 [ 226.314920][T15885] total_mapped_file 0 [ 226.318943][T15885] total_dirty 0 [ 226.322495][T15885] total_writeback 0 [ 226.326309][T15885] total_workingset_refault_anon 31355 [ 226.331734][T15885] total_workingset_refault_file 487 [ 226.336935][T15885] total_swap 364544 [ 226.340831][T15885] total_swapcached 0 [ 226.344754][T15885] total_pgpgin 369029 [ 226.348753][T15885] total_pgpgout 369029 [ 226.352903][T15885] total_pgfault 387953 [ 226.356984][T15885] total_pgmajfault 4075 [ 226.361170][T15885] total_inactive_anon 0 [ 226.365322][T15885] total_active_anon 0 [ 226.369335][T15885] total_inactive_file 0 [ 226.373610][T15885] total_active_file 0 [ 226.377599][T15885] total_unevictable 0 [ 226.381647][T15885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5036,pid=15885,uid=0 [ 226.396539][T15885] Memory cgroup out of memory: Killed process 15885 (syz.3.5036) total-vm:93844kB, anon-rss:920kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 226.399427][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.639511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.709197][T15928] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5063'. [ 226.830232][T15936] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5056'. [ 226.939122][T15924] Set syz1 is full, maxelem 65536 reached [ 227.018456][T15957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.030142][T15957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.084847][T15961] loop8: detected capacity change from 0 to 1024 [ 227.091844][T15961] EXT4-fs: Ignoring removed nobh option [ 227.097444][T15961] EXT4-fs: Ignoring removed bh option [ 227.111164][T15961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.151574][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.276855][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5075'. [ 227.393838][T15988] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5078'. [ 227.403589][T15985] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5078'. [ 227.429459][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.443473][T15993] loop8: detected capacity change from 0 to 256 [ 227.669609][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.786907][T16018] loop8: detected capacity change from 0 to 512 [ 227.829070][T16018] EXT4-fs (loop8): orphan cleanup on readonly fs [ 227.836121][T16018] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5093: bg 0: block 248: padding at end of block bitmap is not set [ 227.865279][T16018] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.5093: Failed to acquire dquot type 1 [ 227.877684][T16018] EXT4-fs (loop8): 1 truncate cleaned up [ 227.884537][T16018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.890681][T16024] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5095'. [ 227.917361][T16018] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.927194][T16018] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.001852][T16018] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.011676][T16018] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.082177][T16018] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.092193][T16018] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.170245][T16018] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.180109][T16018] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.259125][T16018] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.267527][T16018] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.279414][T16018] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.287680][T16018] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.299044][T16018] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.307348][T16018] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.319178][T16018] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.327461][T16018] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.356826][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.474612][T16060] loop8: detected capacity change from 0 to 2048 [ 228.489199][T16064] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.521728][T16060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.536556][T16060] hub 4-0:1.0: USB hub found [ 228.542154][T16060] hub 4-0:1.0: 8 ports detected [ 228.548412][T16064] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.572365][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.611508][T16064] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.657887][T16077] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.709504][ C0] net_ratelimit: 1 callbacks suppressed [ 228.709524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.746617][T16064] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.761485][T16077] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.807759][T16064] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.819302][T16064] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.831490][T16064] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.843315][T16064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.853847][T16077] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.911279][T16077] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.985959][T16077] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.997236][T16077] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.008807][T16077] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.020468][T16077] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.062551][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.072584][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.509481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.759457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.915251][T16131] loop9: detected capacity change from 0 to 128 [ 230.033466][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 230.033483][ T30] audit: type=1326 audit(1742110260.931:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.2.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 230.038874][T16133] bio_check_eod: 24070 callbacks suppressed [ 230.038893][T16133] syz.9.5137: attempt to access beyond end of device [ 230.038893][T16133] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 230.063338][ T30] audit: type=1326 audit(1742110260.941:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.2.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 230.106235][ T30] audit: type=1326 audit(1742110260.941:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.2.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 230.129876][ T30] audit: type=1326 audit(1742110260.941:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.2.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 230.153478][ T30] audit: type=1326 audit(1742110260.941:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.2.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 230.189185][T16131] syz.9.5137: attempt to access beyond end of device [ 230.189185][T16131] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 230.219396][T16131] syz.9.5137: attempt to access beyond end of device [ 230.219396][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.265085][T16131] syz.9.5137: attempt to access beyond end of device [ 230.265085][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.280404][T16133] syz.9.5137: attempt to access beyond end of device [ 230.280404][T16133] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.293814][T16131] syz.9.5137: attempt to access beyond end of device [ 230.293814][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.307202][T16133] syz.9.5137: attempt to access beyond end of device [ 230.307202][T16133] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.320481][T16131] syz.9.5137: attempt to access beyond end of device [ 230.320481][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.355776][T16131] syz.9.5137: attempt to access beyond end of device [ 230.355776][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.369975][T16131] syz.9.5137: attempt to access beyond end of device [ 230.369975][T16131] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 230.559425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.790606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.005741][T16187] loop9: detected capacity change from 0 to 128 [ 231.297183][T16195] hub 4-0:1.0: USB hub found [ 231.313299][T16195] hub 4-0:1.0: 8 ports detected [ 231.417746][ T30] audit: type=1326 audit(1742110262.311:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.3.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 231.441424][ T30] audit: type=1326 audit(1742110262.311:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.3.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 231.556370][ T30] audit: type=1326 audit(1742110262.361:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.3.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 231.579967][ T30] audit: type=1326 audit(1742110262.361:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.3.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 231.603660][ T30] audit: type=1326 audit(1742110262.361:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.3.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 231.609420][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.642799][T16217] syzkaller0: create flow: hash 2396439615 index 1 [ 231.692063][ T6241] syzkaller0: tun_net_xmit 76 [ 231.696914][ T6241] syzkaller0: tun_net_xmit 48 [ 231.703713][T16211] syzkaller0: delete flow: hash 2396439615 index 1 [ 231.723793][T16215] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 231.724448][T16213] tipc: Resetting bearer <eth:syzkaller0> [ 231.736111][T16213] tipc: Disabling bearer <eth:syzkaller0> [ 231.839413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.897352][T16229] ������: renamed from lo (while UP) [ 231.951009][T16231] IPv4: Oversized IP packet from 127.202.26.0 [ 231.973348][T16233] loop9: detected capacity change from 0 to 512 [ 231.973597][T16233] EXT4-fs: inline encryption not supported [ 232.076733][T16233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.076807][T16233] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.082638][T16233] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.5179: corrupted inode contents [ 232.112890][T16233] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.5179: mark_inode_dirty error [ 232.125301][T16233] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.5179: corrupted inode contents [ 232.131383][T16233] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.5179: corrupted inode contents [ 232.150676][T16233] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.5179: mark_inode_dirty error [ 232.162162][T16233] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.5179: corrupted inode contents [ 232.174597][T16233] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.5179: mark_inode_dirty error [ 232.186247][T16233] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.5179: corrupted inode contents [ 232.186410][T16233] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.5179: mark_inode_dirty error [ 232.206158][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.263324][T16250] netlink: 'syz.9.5185': attribute type 7 has an invalid length. [ 232.263343][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5185'. [ 232.287802][T16253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5184'. [ 232.294144][T16252] loop8: detected capacity change from 0 to 512 [ 232.359205][T16252] EXT4-fs (loop8): orphan cleanup on readonly fs [ 232.435936][T16252] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5186: bg 0: block 248: padding at end of block bitmap is not set [ 232.436173][T16252] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.5186: Failed to acquire dquot type 1 [ 232.436666][T16252] EXT4-fs (loop8): 1 truncate cleaned up [ 232.452328][T16252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.462502][T16252] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.462539][T16252] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.498848][T16252] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.498885][T16252] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.536707][T16252] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.536741][T16252] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.585971][T16252] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.586026][T16252] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.629426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.638328][T16252] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.638449][T16252] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.643618][T16252] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.643756][T16252] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.646669][T16252] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.646710][T16252] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.650146][T16252] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.650197][T16252] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.671598][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.869547][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.231864][T16298] tipc: Started in network mode [ 233.231929][T16298] tipc: Node identity 7a40734976af, cluster identity 4711 [ 233.231991][T16298] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 233.244901][T16297] tipc: Resetting bearer <eth:syzkaller0> [ 233.315003][T16297] tipc: Disabling bearer <eth:syzkaller0> [ 233.440795][T16315] netlink: 332 bytes leftover after parsing attributes in process `syz.8.5213'. [ 233.503895][T16318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5212'. [ 233.909414][ C0] net_ratelimit: 1 callbacks suppressed [ 233.909434][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.997989][T16322] loop9: detected capacity change from 0 to 128 [ 234.018894][T16340] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 234.048231][T16339] tipc: Resetting bearer <eth:syzkaller0> [ 234.060186][T16339] tipc: Disabling bearer <eth:syzkaller0> [ 234.121609][T16346] netlink: 'syz.6.5226': attribute type 4 has an invalid length. [ 234.265028][T16349] netlink: 'syz.6.5228': attribute type 4 has an invalid length. [ 234.265054][T16349] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5228'. [ 234.475798][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5237'. [ 234.622387][T16372] pim6reg1: entered promiscuous mode [ 234.627736][T16372] pim6reg1: entered allmulticast mode [ 234.709466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.750248][T16385] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.822149][T16385] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.883603][T16385] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.907215][T16394] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5248'. [ 234.932701][T16385] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.944067][T16383] loop8: detected capacity change from 0 to 128 [ 234.959570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.004427][T16385] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.022973][T16385] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.054134][T16385] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.066363][T16385] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.077689][T16386] bio_check_eod: 25855 callbacks suppressed [ 235.077707][T16386] syz.8.5244: attempt to access beyond end of device [ 235.077707][T16386] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 235.146213][T16404] program syz.2.5251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.150415][T16383] syz.8.5244: attempt to access beyond end of device [ 235.150415][T16383] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 235.181542][T16383] syz.8.5244: attempt to access beyond end of device [ 235.181542][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.194925][T16383] syz.8.5244: attempt to access beyond end of device [ 235.194925][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.209214][T16383] syz.8.5244: attempt to access beyond end of device [ 235.209214][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.241958][T16386] syz.8.5244: attempt to access beyond end of device [ 235.241958][T16386] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.261973][T16383] syz.8.5244: attempt to access beyond end of device [ 235.261973][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.277473][T16386] syz.8.5244: attempt to access beyond end of device [ 235.277473][T16386] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.291132][T16383] syz.8.5244: attempt to access beyond end of device [ 235.291132][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.304708][T16383] syz.8.5244: attempt to access beyond end of device [ 235.304708][T16383] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 235.344896][T16400] loop9: detected capacity change from 0 to 128 [ 235.375920][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 235.375939][ T30] audit: type=1400 audit(1742110266.271:5574): avc: denied { module_load } for pid=16408 comm="syz.2.5253" path="/1137/bus" dev="tmpfs" ino=5968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 235.447269][T16409] Invalid ELF header magic: != ELF [ 235.553815][ T30] audit: type=1326 audit(1742110266.451:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.577371][ T30] audit: type=1326 audit(1742110266.451:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.600951][ T30] audit: type=1326 audit(1742110266.451:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.624619][ T30] audit: type=1326 audit(1742110266.451:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.648207][ T30] audit: type=1326 audit(1742110266.451:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.671786][ T30] audit: type=1326 audit(1742110266.451:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.695380][ T30] audit: type=1326 audit(1742110266.451:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.718974][ T30] audit: type=1326 audit(1742110266.451:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.719006][ T30] audit: type=1326 audit(1742110266.451:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.2.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f086da6d169 code=0x7ffc0000 [ 235.759429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.770328][T16416] vhci_hcd: invalid port number 15 [ 235.770343][T16416] vhci_hcd: invalid port number 15 [ 235.913448][T16427] SELinux: failed to load policy [ 235.988182][T16440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16440 comm=syz.3.5266 [ 236.009409][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.385902][T16445] loop9: detected capacity change from 0 to 128 [ 236.531108][T16479] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 236.537672][T16479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.545232][T16479] vhci_hcd vhci_hcd.0: Device attached [ 236.567825][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5283'. [ 236.632469][T16482] bridge0: port 1(batadv1) entered blocking state [ 236.639094][T16482] bridge0: port 1(batadv1) entered disabled state [ 236.660057][T16482] batadv1: entered allmulticast mode [ 236.701273][T16482] batadv1: entered promiscuous mode [ 236.771832][T16480] vhci_hcd: connection closed [ 236.789457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.801324][ T6238] vhci_hcd: stop threads [ 236.805598][ T6238] vhci_hcd: release socket [ 236.810152][ T6238] vhci_hcd: disconnect device [ 236.891734][ T3375] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 236.903959][ T3375] usb 13-1: enqueue for inactive port 0 [ 236.910201][ T3375] usb 13-1: enqueue for inactive port 0 [ 236.916199][ T3375] usb 13-1: enqueue for inactive port 0 [ 236.999424][ T3375] vhci_hcd: vhci_device speed not set [ 237.039525][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.075072][T16491] netem: change failed [ 237.180742][ T6220] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 237.190174][ T6220] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 237.224363][T16495] loop9: detected capacity change from 0 to 512 [ 237.278622][T16495] EXT4-fs (loop9): orphan cleanup on readonly fs [ 237.285897][T16495] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5288: bg 0: block 248: padding at end of block bitmap is not set [ 237.437576][T16495] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5288: Failed to acquire dquot type 1 [ 237.450303][T16495] EXT4-fs (loop9): 1 truncate cleaned up [ 237.456474][T16495] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.474077][T16495] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.650588][T16502] syzkaller0: entered promiscuous mode [ 237.656208][T16502] syzkaller0: entered allmulticast mode [ 237.686835][T16495] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.791300][T16495] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.829494][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.878376][T16495] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.941503][T16495] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.998580][T16495] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.045127][T16495] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.056704][T16495] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.069434][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.086702][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.204774][T16535] loop9: detected capacity change from 0 to 128 [ 238.212167][T16535] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.224715][T16535] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.402568][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5306'. [ 238.415650][T16544] syz_tun: entered promiscuous mode [ 238.422496][T16544] syz_tun: left promiscuous mode [ 238.516208][T16546] loop9: detected capacity change from 0 to 512 [ 238.528554][T16546] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 238.573283][T16546] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.5307: invalid indirect mapped block 4294967295 (level 0) [ 238.595283][T16546] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.5307: invalid indirect mapped block 4294967295 (level 1) [ 238.614975][T16546] EXT4-fs (loop9): 1 orphan inode deleted [ 238.623294][T16546] EXT4-fs (loop9): 1 truncate cleaned up [ 238.643493][T16546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.656225][T16552] ������: renamed from vlan1 [ 238.672083][T16546] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 238.825773][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.843358][T16560] loop8: detected capacity change from 0 to 512 [ 238.858720][T16560] EXT4-fs (loop8): orphan cleanup on readonly fs [ 238.866752][T16560] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5313: bg 0: block 248: padding at end of block bitmap is not set [ 238.881150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.889839][T16560] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.5313: Failed to acquire dquot type 1 [ 238.903146][T16560] EXT4-fs (loop8): 1 truncate cleaned up [ 238.912678][T16560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.939624][T16560] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.949588][T16560] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.109500][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.121187][T16560] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.131024][T16560] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.177232][T16579] Invalid ELF header magic: != ELF [ 239.202949][T16560] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.212947][T16560] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.272147][T16560] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.282111][T16560] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.349052][T16560] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.357627][T16560] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.369427][T16560] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.377768][T16560] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.389576][T16560] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.397855][T16560] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.410091][T16560] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.418354][T16560] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.479131][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.490408][T16581] loop9: detected capacity change from 0 to 128 [ 239.765420][T16606] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5332'. [ 239.776875][T16606] gretap0: entered promiscuous mode [ 239.789607][T16606] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5332'. [ 239.825396][T16606] 0�X��D: renamed from gretap0 [ 239.848420][T16606] 0�X��D: left promiscuous mode [ 239.853503][T16606] 0�X��D: entered allmulticast mode [ 239.886345][T16606] A link change request failed with some changes committed already. Interface 30�X��D may have been left with an inconsistent configuration, please check. [ 239.909461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.017468][T16585] syz.6.5324 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 240.018382][T16611] syzkaller0: entered promiscuous mode [ 240.028577][T16585] CPU: 1 UID: 0 PID: 16585 Comm: syz.6.5324 Tainted: G W 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 240.028612][T16585] Tainted: [W]=WARN [ 240.028622][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.028638][T16585] Call Trace: [ 240.028648][T16585] <TASK> [ 240.028658][T16585] dump_stack_lvl+0xf2/0x150 [ 240.028696][T16585] dump_stack+0x15/0x1a [ 240.028764][T16585] dump_header+0x83/0x2d0 [ 240.028809][T16585] oom_kill_process+0x341/0x4c0 [ 240.028851][T16585] out_of_memory+0x9af/0xbe0 [ 240.028989][T16585] ? css_next_descendant_pre+0x11c/0x140 [ 240.029022][T16585] mem_cgroup_out_of_memory+0x13e/0x190 [ 240.029064][T16585] try_charge_memcg+0x508/0x7f0 [ 240.029096][T16585] charge_memcg+0x50/0xc0 [ 240.029127][T16585] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 240.029250][T16585] __read_swap_cache_async+0x236/0x480 [ 240.029287][T16585] swap_cluster_readahead+0x279/0x3f0 [ 240.029333][T16585] swapin_readahead+0xe4/0x6f0 [ 240.029371][T16585] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 240.029460][T16585] ? swap_cache_get_folio+0x77/0x210 [ 240.029494][T16585] do_swap_page+0x31b/0x2550 [ 240.029548][T16585] ? __rcu_read_lock+0x36/0x50 [ 240.029585][T16585] ? __pfx_default_wake_function+0x10/0x10 [ 240.029628][T16585] handle_mm_fault+0x8e4/0x2ac0 [ 240.029665][T16585] exc_page_fault+0x3b9/0x650 [ 240.029748][T16585] asm_exc_page_fault+0x26/0x30 [ 240.029782][T16585] RIP: 0033:0x7f7939bd3bcc [ 240.029803][T16585] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 240.029826][T16585] RSP: 002b:00007fffcc57f870 EFLAGS: 00010202 [ 240.029846][T16585] RAX: 0000000000000000 RBX: 00007f7939f15fa0 RCX: 0000000000000000 [ 240.029866][T16585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557b71e808 [ 240.029954][T16585] RBP: 00007f7939f17ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 240.029971][T16585] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003a9c0 [ 240.029986][T16585] R13: 00007fffcc57f960 R14: ffffffffffffffff R15: 00007fffcc57f980 [ 240.030058][T16585] </TASK> [ 240.030087][T16585] memory: usage 307200kB, limit 307200kB, failcnt 116 [ 240.034080][T16611] syzkaller0: entered allmulticast mode [ 240.046304][T16585] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 240.089629][T16581] bio_check_eod: 19134 callbacks suppressed [ 240.089700][T16581] syz.9.5322: attempt to access beyond end of device [ 240.089700][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.094827][T16585] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 240.109504][T16581] syz.9.5322: attempt to access beyond end of device [ 240.109504][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.109572][T16585] Memory cgroup stats for [ 240.122079][T16581] syz.9.5322: attempt to access beyond end of device [ 240.122079][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.126430][T16585] /syz6: [ 240.151584][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.198295][T16585] cache 0 [ 240.212432][T16581] syz.9.5322: attempt to access beyond end of device [ 240.212432][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.218378][T16585] rss 4096 [ 240.218390][T16585] shmem 0 [ 240.227427][T16581] syz.9.5322: attempt to access beyond end of device [ 240.227427][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.234399][T16585] mapped_file 0 [ 240.243492][T16581] syz.9.5322: attempt to access beyond end of device [ 240.243492][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.245379][T16585] dirty 0 [ 240.245390][T16585] writeback 12288 [ 240.245399][T16585] workingset_refault_anon 20077 [ 240.252272][T16581] syz.9.5322: attempt to access beyond end of device [ 240.252272][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.257705][T16585] workingset_refault_file 224 [ 240.257718][T16585] swap 303104 [ 240.268893][T16581] syz.9.5322: attempt to access beyond end of device [ 240.268893][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.271536][T16585] swapcached 32768 [ 240.285734][T16581] syz.9.5322: attempt to access beyond end of device [ 240.285734][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.292016][T16585] pgpgin 285378 [ 240.292027][T16585] pgpgout 285370 [ 240.306140][T16581] syz.9.5322: attempt to access beyond end of device [ 240.306140][T16581] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 240.309633][T16585] pgfault 300139 [ 240.309644][T16585] pgmajfault 2536 [ 240.309653][T16585] inactive_anon 32768 [ 240.309663][T16585] active_anon 0 [ 240.309673][T16585] inactive_file 0 [ 240.486272][T16585] active_file 0 [ 240.486284][T16585] unevictable 0 [ 240.486293][T16585] hierarchical_memory_limit 314572800 [ 240.486302][T16585] hierarchical_memsw_limit 9223372036854771712 [ 240.486314][T16585] total_cache 0 [ 240.486321][T16585] total_rss 4096 [ 240.486327][T16585] total_shmem 0 [ 240.486334][T16585] total_mapped_file 0 [ 240.486341][T16585] total_dirty 0 [ 240.486349][T16585] total_writeback 12288 [ 240.486368][T16585] total_workingset_refault_anon 20077 [ 240.486379][T16585] total_workingset_refault_file 224 [ 240.486469][T16585] total_swap 303104 [ 240.486479][T16585] total_swapcached 32768 [ 240.486487][T16585] total_pgpgin 285378 [ 240.486494][T16585] total_pgpgout 285370 [ 240.486501][T16585] total_pgfault 300139 [ 240.486510][T16585] total_pgmajfault 2536 [ 240.486519][T16585] total_inactive_anon 32768 [ 240.486529][T16585] total_active_anon 0 [ 240.486538][T16585] total_inactive_file 0 [ 240.486547][T16585] total_active_file 0 [ 240.486557][T16585] total_unevictable 0 [ 240.486566][T16585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5324,pid=16585,uid=0 [ 240.486717][T16585] Memory cgroup out of memory: Killed process 16585 (syz.6.5324) total-vm:95628kB, anon-rss:916kB, file-rss:22068kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 240.510272][T16617] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.644220][T16617] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.714730][T16617] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.854746][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 240.854764][ T30] audit: type=1400 audit(1742110271.751:5664): avc: denied { mounton } for pid=16627 comm="syz.9.5341" path="/proc/1059/task" dev="proc" ino=64512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 240.900393][T16617] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.912400][ T30] audit: type=1400 audit(1742110271.751:5665): avc: denied { mount } for pid=16627 comm="syz.9.5341" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.913148][T16631] loop9: detected capacity change from 0 to 1024 [ 240.941571][T16631] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 240.959481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.033656][T16617] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.063397][T16617] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.120845][T16617] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.151034][T16617] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.189543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.210598][T16642] program syz.2.5346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.251834][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5348'. [ 241.448238][T16662] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.462570][T16660] loop9: detected capacity change from 0 to 1024 [ 241.469857][T16660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.481567][T16660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.487637][T16662] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.517497][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.552594][T16669] SET target dimension over the limit! [ 241.591251][T16662] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.641707][T16662] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.707549][T16662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.719802][T16662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.732775][T16662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.744540][T16662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.885508][ T30] audit: type=1326 audit(1742110272.781:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 241.909167][ T30] audit: type=1326 audit(1742110272.781:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 241.987685][ T30] audit: type=1326 audit(1742110272.781:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 242.011230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.018384][ T30] audit: type=1326 audit(1742110272.781:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 242.041979][ T30] audit: type=1326 audit(1742110272.781:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 242.042017][ T30] audit: type=1326 audit(1742110272.781:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 242.042052][ T30] audit: type=1326 audit(1742110272.781:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 242.042087][ T30] audit: type=1326 audit(1742110272.781:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f488408bc1f code=0x7ffc0000 [ 242.239440][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.739941][T16813] SET target dimension over the limit! [ 242.923645][T16823] ipvlan1: entered allmulticast mode [ 243.013830][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5386'. [ 243.029426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.065579][T16838] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.141054][T16838] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.190851][T16838] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.218032][T16841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=16841 comm=syz.3.5388 [ 243.270039][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.285118][T16838] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.336642][T16838] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.348227][T16838] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.360495][T16838] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.374481][T16838] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.398611][T16845] geneve2: entered promiscuous mode [ 243.403928][T16845] geneve2: entered allmulticast mode [ 243.441585][T16851] ipvlan1: entered allmulticast mode [ 243.447036][T16851] veth0_vlan: entered allmulticast mode [ 243.487625][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5394'. [ 243.696363][T16875] loop9: detected capacity change from 0 to 512 [ 243.714404][T16875] EXT4-fs (loop9): orphan cleanup on readonly fs [ 243.722891][T16875] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5403: bg 0: block 248: padding at end of block bitmap is not set [ 243.774820][T16875] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5403: Failed to acquire dquot type 1 [ 243.813365][T16875] EXT4-fs (loop9): 1 truncate cleaned up [ 243.820389][T16875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.850606][T16875] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.901177][T16888] loop8: detected capacity change from 0 to 128 [ 243.907864][T16888] EXT4-fs: Ignoring removed nobh option [ 243.916166][T16875] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.929202][T16888] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.944858][T16888] ext4 filesystem being mounted at /464/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.961620][T16875] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.993188][T10856] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.041244][T16875] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.141103][T16875] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.154717][T16875] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.171347][T16875] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.203039][T16875] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.218657][T16909] loop8: detected capacity change from 0 to 1024 [ 244.225478][T16909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.254120][T16909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.295690][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.307981][T16913] ipvlan1: entered allmulticast mode [ 244.313453][T16913] veth0_vlan: entered allmulticast mode [ 244.319406][ C0] net_ratelimit: 1 callbacks suppressed [ 244.319422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.343198][T16915] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.364243][T16919] random: crng reseeded on system resumption [ 244.400004][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.453631][T16915] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.497518][T16934] netlink: 'syz.8.5424': attribute type 1 has an invalid length. [ 244.511561][T16934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.532137][T16934] ip6erspan0: entered promiscuous mode [ 244.540927][T16934] bond1: (slave ip6erspan0): making interface the new active one [ 244.550439][T16934] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 244.560354][T16915] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.588535][T16937] loop8: detected capacity change from 0 to 512 [ 244.600712][T16937] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 244.616616][T16941] random: crng reseeded on system resumption [ 244.617788][T16937] EXT4-fs (loop8): mount failed [ 244.630162][T16915] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.868229][T16949] loop8: detected capacity change from 0 to 128 [ 244.893029][T16947] loop9: detected capacity change from 0 to 128 [ 245.089389][T16947] bio_check_eod: 21050 callbacks suppressed [ 245.089410][T16947] syz.9.5439: attempt to access beyond end of device [ 245.089410][T16947] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.089431][T16949] syz.8.5428: attempt to access beyond end of device [ 245.089431][T16949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.095445][T16947] syz.9.5439: attempt to access beyond end of device [ 245.095445][T16947] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.109714][T16949] syz.8.5428: attempt to access beyond end of device [ 245.109714][T16949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.121761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.136169][T16949] syz.8.5428: attempt to access beyond end of device [ 245.136169][T16949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.148348][T16947] syz.9.5439: attempt to access beyond end of device [ 245.148348][T16947] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.159644][T16949] syz.8.5428: attempt to access beyond end of device [ 245.159644][T16949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.168576][T16947] syz.9.5439: attempt to access beyond end of device [ 245.168576][T16947] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.182433][T16949] syz.8.5428: attempt to access beyond end of device [ 245.182433][T16949] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.194915][T16947] syz.9.5439: attempt to access beyond end of device [ 245.194915][T16947] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.342204][T16954] SET target dimension over the limit! [ 245.359529][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.402286][T16956] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.470864][T16956] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.511872][T16956] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.580748][T16956] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.637833][T16956] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.650534][T16956] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.662534][T16956] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.675205][T16956] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.752119][T16974] loop8: detected capacity change from 0 to 512 [ 245.770586][T16974] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 245.785337][T16974] EXT4-fs (loop8): mount failed [ 245.861211][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 245.861228][ T30] audit: type=1326 audit(1742110276.761:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f7dbb4127 code=0x7ffc0000 [ 245.890934][ T30] audit: type=1326 audit(1742110276.761:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f7db59359 code=0x7ffc0000 [ 245.914446][ T30] audit: type=1326 audit(1742110276.761:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 245.940666][ T30] audit: type=1326 audit(1742110276.831:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f7dbb4127 code=0x7ffc0000 [ 245.964239][ T30] audit: type=1326 audit(1742110276.831:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f7db59359 code=0x7ffc0000 [ 245.987793][ T30] audit: type=1326 audit(1742110276.831:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 246.011820][ T30] audit: type=1326 audit(1742110276.911:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f7dbb4127 code=0x7ffc0000 [ 246.035791][ T30] audit: type=1326 audit(1742110276.931:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f7db59359 code=0x7ffc0000 [ 246.059394][ T30] audit: type=1326 audit(1742110276.931:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f7dbb4127 code=0x7ffc0000 [ 246.082834][ T30] audit: type=1326 audit(1742110276.931:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.9.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f7db59359 code=0x7ffc0000 [ 246.149508][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.389486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.792787][T17004] loop9: detected capacity change from 0 to 1024 [ 246.831053][T17004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.864166][T17004] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.877479][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5454'. [ 246.901789][T17004] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 246.914257][T17004] EXT4-fs (loop9): This should not happen!! Data will be lost [ 246.914257][T17004] [ 246.924111][T17004] EXT4-fs (loop9): Total free blocks count 0 [ 246.930269][T17004] EXT4-fs (loop9): Free/Dirty block details [ 246.936205][T17004] EXT4-fs (loop9): free_blocks=0 [ 246.941208][T17004] EXT4-fs (loop9): dirty_blocks=0 [ 246.946262][T17004] EXT4-fs (loop9): Block reservation details [ 246.952271][T17004] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 246.985582][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.043345][T17015] loop9: detected capacity change from 0 to 512 [ 247.061299][T17015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 247.069639][T17015] System zones: 0-2, 18-18, 34-34 [ 247.075471][T17015] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5457: bg 0: block 248: padding at end of block bitmap is not set [ 247.090759][T17015] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5457: Failed to acquire dquot type 1 [ 247.102638][T17015] EXT4-fs (loop9): 1 truncate cleaned up [ 247.108952][T17015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.122377][T17015] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.146818][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.189456][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.286097][T16915] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.299944][T16915] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.311969][T16915] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.325590][T16915] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.439513][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.472648][T17055] loop9: detected capacity change from 0 to 512 [ 247.483468][T17055] EXT4-fs: Ignoring removed i_version option [ 247.504680][T17055] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.527550][T17055] ext4 filesystem being mounted at /518/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.572227][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.239445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.469430][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.541412][T17072] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.572955][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5481'. [ 248.590490][T17078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.597974][T17078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.606179][T17078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.613623][T17078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.625327][T17072] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.682142][T17072] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.745752][T17083] syzkaller0: entered promiscuous mode [ 248.751326][T17083] syzkaller0: entered allmulticast mode [ 248.759198][T17072] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.064123][T17093] loop9: detected capacity change from 0 to 512 [ 249.076521][T17093] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 249.097443][T17093] EXT4-fs (loop9): 1 truncate cleaned up [ 249.113322][T17093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.244832][T17107] netlink: 'syz.2.5491': attribute type 4 has an invalid length. [ 249.264838][T17107] netlink: 'syz.2.5491': attribute type 4 has an invalid length. [ 249.272651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.330644][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.398447][T17125] loop9: detected capacity change from 0 to 512 [ 249.416908][T17125] EXT4-fs (loop9): orphan cleanup on readonly fs [ 249.424133][T17125] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5501: bg 0: block 248: padding at end of block bitmap is not set [ 249.440198][T17125] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5501: Failed to acquire dquot type 1 [ 249.452613][T17125] EXT4-fs (loop9): 1 truncate cleaned up [ 249.457860][T17128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17128 comm=+}[@ [ 249.471252][T17125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.488577][T17125] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.507444][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.515045][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.522278][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.529733][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.537377][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.544891][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.552397][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.559924][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.567338][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.574792][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.582210][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.589644][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.597035][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.604430][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.611826][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.619293][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.626728][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.634173][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.641658][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.649237][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.656824][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.664260][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.671758][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679204][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679234][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679259][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679314][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679336][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679592][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.679616][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 249.680279][ T9] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 249.704537][T17125] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.747675][T17125] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.780907][T17125] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.828530][T17148] loop8: detected capacity change from 0 to 736 [ 249.847314][T17125] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.855914][T17148] Cannot find set identified by id 0 to match [ 249.860419][T17125] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.874688][T17125] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.902022][T17125] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.914599][T17148] rock: directory entry would overflow storage [ 249.920893][T17148] rock: sig=0x5850, size=36, remaining=14 [ 249.927444][T17148] rock: directory entry would overflow storage [ 249.933680][T17148] rock: sig=0x5850, size=36, remaining=14 [ 249.954480][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.187840][T17177] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.260752][T17177] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.290062][T17190] bridge0: port 3(syz_tun) entered blocking state [ 250.296580][T17190] bridge0: port 3(syz_tun) entered disabled state [ 250.303598][T17190] syz_tun: entered allmulticast mode [ 250.310456][T17190] syz_tun: entered promiscuous mode [ 250.316344][T17190] bridge0: port 3(syz_tun) entered blocking state [ 250.319428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.322817][T17190] bridge0: port 3(syz_tun) entered forwarding state [ 250.337589][T17177] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.348678][T17192] SELinux: syz.3.5530 (17192) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 250.401044][T17177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.476601][T17177] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.490421][T17177] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.505539][T17177] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.517856][T17177] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.559433][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.571856][T17204] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.597007][T17072] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.611587][T17072] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.623858][T17072] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.634198][T17204] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.647755][T17072] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.681331][T17204] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.725624][T17204] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.785799][T17204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.818369][T17204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.842542][T17204] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.866458][T17204] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.939930][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 250.939945][ T30] audit: type=1326 audit(1742110281.831:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 250.969762][ T30] audit: type=1326 audit(1742110281.831:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 250.993353][ T30] audit: type=1326 audit(1742110281.831:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.016884][ T30] audit: type=1326 audit(1742110281.831:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.040459][ T30] audit: type=1326 audit(1742110281.831:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.064011][ T30] audit: type=1326 audit(1742110281.831:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.087552][ T30] audit: type=1326 audit(1742110281.831:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.111209][ T30] audit: type=1326 audit(1742110281.831:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.134957][ T30] audit: type=1326 audit(1742110281.831:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.158455][ T30] audit: type=1326 audit(1742110281.831:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.3.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488408d169 code=0x7ffc0000 [ 251.329064][T17218] syzkaller0: entered promiscuous mode [ 251.335324][T17218] syzkaller0: entered allmulticast mode [ 251.349564][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.520344][T17236] loop8: detected capacity change from 0 to 2048 [ 251.560301][T17236] loop8: p1 < > p4 [ 251.568538][T17236] loop8: p4 size 8388608 extends beyond EOD, truncated [ 251.589533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.635052][T17242] IPv4: Oversized IP packet from 127.202.26.0 [ 251.737824][T17253] netlink: 'syz.6.5556': attribute type 3 has an invalid length. [ 251.800556][T17257] netlink: 'syz.8.5558': attribute type 39 has an invalid length. [ 251.814086][T17257] veth1_macvtap: left promiscuous mode [ 252.021659][T17266] 9pnet_fd: Insufficient options for proto=fd [ 252.305004][T17284] loop9: detected capacity change from 0 to 512 [ 252.314296][T17284] ext2: Unknown parameter 'smackfsroot' [ 252.389404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.456067][T17308] tipc: New replicast peer: 255.0.0.255 [ 252.461817][T17308] tipc: Enabled bearer <udp:s>, priority 10 [ 252.639412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.745376][T17320] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.784526][T17311] loop8: detected capacity change from 0 to 128 [ 252.831255][T17320] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.851320][T17311] bio_check_eod: 18841 callbacks suppressed [ 252.851339][T17311] syz.8.5580: attempt to access beyond end of device [ 252.851339][T17311] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 252.878310][T17311] syz.8.5580: attempt to access beyond end of device [ 252.878310][T17311] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 252.892496][T17311] syz.8.5580: attempt to access beyond end of device [ 252.892496][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.905950][T17311] syz.8.5580: attempt to access beyond end of device [ 252.905950][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.920070][T17311] syz.8.5580: attempt to access beyond end of device [ 252.920070][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.922460][T17320] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.934224][T17311] syz.8.5580: attempt to access beyond end of device [ 252.934224][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.956728][T17311] syz.8.5580: attempt to access beyond end of device [ 252.956728][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.956771][T17311] syz.8.5580: attempt to access beyond end of device [ 252.956771][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.956846][T17311] syz.8.5580: attempt to access beyond end of device [ 252.956846][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.956889][T17311] syz.8.5580: attempt to access beyond end of device [ 252.956889][T17311] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 253.040354][T17320] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.261028][T17325] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.310202][T17326] netlink: 'syz.9.5584': attribute type 10 has an invalid length. [ 253.318145][T17326] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5584'. [ 253.330990][T17325] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.398415][T17326] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 253.419335][T17325] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.429788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.456071][T17332] loop8: detected capacity change from 0 to 2048 [ 253.484715][T17332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.498853][T17325] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.525378][T17332] EXT4-fs (loop8): shut down requested (0) [ 253.631560][T17347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17347 comm=+}[@ [ 253.814368][T10856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.978812][T17320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.015602][T17320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.056568][T17320] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.088959][T17320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.151704][T17325] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.167061][T17325] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.182570][T17325] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.209411][T17325] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.719422][ C0] net_ratelimit: 3 callbacks suppressed [ 254.719439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.142233][T17411] ������: renamed from vlan0 [ 255.296500][T17420] pim6reg1: entered promiscuous mode [ 255.301967][T17420] pim6reg1: entered allmulticast mode [ 255.334082][T17428] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 255.402787][T17439] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.412620][T17439] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.491177][T17439] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.501033][T17439] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.510874][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.570974][T17439] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.581138][T17439] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.641502][T17439] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.651465][T17439] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.665180][T17462] netlink: 'syz.2.5637': attribute type 1 has an invalid length. [ 255.680644][T17462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.697295][T17462] ip6erspan0: entered promiscuous mode [ 255.706417][T17462] bond1: (slave ip6erspan0): making interface the new active one [ 255.715773][T17462] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 255.734356][T17439] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.742697][T17439] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.759592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.771604][T17439] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.779951][T17439] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.797151][T17439] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.805500][T17439] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.817745][T17439] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.826014][T17439] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.889583][T17473] netlink: 'syz.2.5642': attribute type 10 has an invalid length. [ 255.898478][T17473] hsr_slave_0: left promiscuous mode [ 255.904928][T17473] hsr_slave_1: left promiscuous mode [ 255.947608][T17475] loop9: detected capacity change from 0 to 8192 [ 255.956237][ T30] kauditd_printk_skb: 522 callbacks suppressed [ 255.956256][ T30] audit: type=1326 audit(1742110286.851:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7939cf4127 code=0x7ffc0000 [ 255.986035][ T30] audit: type=1326 audit(1742110286.851:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7939c99359 code=0x7ffc0000 [ 256.009527][ T30] audit: type=1326 audit(1742110286.851:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7939cfd169 code=0x7ffc0000 [ 256.033074][ T30] audit: type=1326 audit(1742110286.861:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7939cf4127 code=0x7ffc0000 [ 256.056559][ T30] audit: type=1326 audit(1742110286.861:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7939c99359 code=0x7ffc0000 [ 256.080044][ T30] audit: type=1326 audit(1742110286.861:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7939cfd169 code=0x7ffc0000 [ 256.103396][ T30] audit: type=1326 audit(1742110286.861:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7939cf4127 code=0x7ffc0000 [ 256.127044][ T30] audit: type=1326 audit(1742110286.861:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7939c99359 code=0x7ffc0000 [ 256.151143][ T30] audit: type=1326 audit(1742110286.861:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7939cfd169 code=0x7ffc0000 [ 256.174664][ T30] audit: type=1326 audit(1742110286.861:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7939cf4127 code=0x7ffc0000 [ 256.245534][T17479] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 256.253910][T17478] tipc: Resetting bearer <eth:syzkaller0> [ 256.266420][T17478] tipc: Disabling bearer <eth:syzkaller0> [ 256.451548][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5655'. [ 256.549439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.789428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.894485][T17513] netlink: 'syz.8.5660': attribute type 4 has an invalid length. [ 256.920949][T17513] netlink: 'syz.8.5660': attribute type 4 has an invalid length. [ 257.589401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.767539][T17546] pim6reg1: entered promiscuous mode [ 257.772934][T17546] pim6reg1: entered allmulticast mode [ 257.798789][T17548] netlink: 148 bytes leftover after parsing attributes in process `+}[@'. [ 257.807419][T17548] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.831490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.133581][T17568] netlink: 'syz.6.5683': attribute type 4 has an invalid length. [ 258.157063][T17568] netlink: 'syz.6.5683': attribute type 4 has an invalid length. [ 258.434257][T17575] loop9: detected capacity change from 0 to 256 [ 258.469253][T17575] FAT-fs (loop9): codepage cp865 not found [ 258.629444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.869458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.075202][T17598] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 259.096483][T17600] pim6reg1: entered promiscuous mode [ 259.101868][T17600] pim6reg1: entered allmulticast mode [ 259.351787][T17621] netlink: 'syz.2.5705': attribute type 1 has an invalid length. [ 259.359656][T17621] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5705'. [ 259.368625][T17621] NCSI netlink: No device for ifindex 0 [ 259.396059][T17621] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5705'. [ 259.426258][T17629] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 259.487647][T17631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.540744][T17631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.581093][T17631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.631268][T17631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.693118][T17631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.716946][T17631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.730842][T17631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.743355][T17631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.909469][ C0] net_ratelimit: 1 callbacks suppressed [ 259.909498][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.947508][T17639] tipc: Enabling of bearer <udp:s> rejected, already enabled [ 260.252609][T17648] pim6reg1: entered promiscuous mode [ 260.257983][T17648] pim6reg1: entered allmulticast mode [ 260.590147][ T3387] Process accounting resumed [ 260.709425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.949536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.970027][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 260.970042][ T30] audit: type=1326 audit(1742110291.871:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.004264][T17673] loop9: detected capacity change from 0 to 128 [ 261.036016][ T30] audit: type=1326 audit(1742110291.901:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.059664][ T30] audit: type=1326 audit(1742110291.901:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.077263][T17673] bio_check_eod: 10660 callbacks suppressed [ 261.077285][T17673] syz.9.5728: attempt to access beyond end of device [ 261.077285][T17673] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 261.083217][ T30] audit: type=1326 audit(1742110291.901:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.126264][ T30] audit: type=1326 audit(1742110291.901:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.149813][ T30] audit: type=1326 audit(1742110291.901:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.173338][ T30] audit: type=1326 audit(1742110291.901:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.196889][ T30] audit: type=1326 audit(1742110291.901:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.220578][ T30] audit: type=1326 audit(1742110291.901:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.244157][ T30] audit: type=1326 audit(1742110291.901:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.8.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 261.275336][T17673] syz.9.5728: attempt to access beyond end of device [ 261.275336][T17673] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 261.309490][T17673] syz.9.5728: attempt to access beyond end of device [ 261.309490][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.330960][T17676] syz.9.5728: attempt to access beyond end of device [ 261.330960][T17676] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.349039][T17676] syz.9.5728: attempt to access beyond end of device [ 261.349039][T17676] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.364737][T17673] syz.9.5728: attempt to access beyond end of device [ 261.364737][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.378222][T17673] syz.9.5728: attempt to access beyond end of device [ 261.378222][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.393217][T17673] syz.9.5728: attempt to access beyond end of device [ 261.393217][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.430278][T17673] syz.9.5728: attempt to access beyond end of device [ 261.430278][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.449588][T17673] syz.9.5728: attempt to access beyond end of device [ 261.449588][T17673] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.471223][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5737'. [ 261.611135][T17713] syzkaller0: entered promiscuous mode [ 261.611411][T17716] serio: Serial port ptm0 [ 261.616652][T17713] syzkaller0: entered allmulticast mode [ 261.749418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.882408][T17737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.899620][T17737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.989515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.083611][T17747] loop9: detected capacity change from 0 to 1024 [ 262.160061][T17747] EXT4-fs: Ignoring removed nobh option [ 262.165692][T17747] EXT4-fs: Ignoring removed bh option [ 262.364920][T17747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.418234][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.636552][T17757] syzkaller0: entered promiscuous mode [ 262.642107][T17757] syzkaller0: entered allmulticast mode [ 262.789493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.029437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.426209][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5774'. [ 263.494773][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5777'. [ 263.839464][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.069553][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.395611][T17817] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 264.413265][T17819] Cannot find del_set index 4 as target [ 264.434320][T17819] vlan0: entered allmulticast mode [ 264.434383][T17819] bond_slave_0: entered allmulticast mode [ 264.435849][T17819] bond_slave_0: left allmulticast mode [ 264.487648][T17830] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.518568][T17832] loop9: detected capacity change from 0 to 2048 [ 264.526641][T17830] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.548137][T17832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.578893][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.590400][T17830] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.641337][T17830] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.719150][T17830] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.722458][T17830] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.725721][T17830] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.728805][T17830] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.869457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.119432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.135201][T17849] IPv4: Oversized IP packet from 127.202.26.0 [ 265.413845][T17862] bond1: entered promiscuous mode [ 265.418925][T17862] bond1: entered allmulticast mode [ 265.424539][T17862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.441671][T17862] bond1 (unregistering): Released all slaves [ 265.576163][T17878] netfs: Couldn't get user pages (rc=-14) [ 265.909442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.149472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.228754][T17892] pim6reg1: entered promiscuous mode [ 266.234209][T17892] pim6reg1: entered allmulticast mode [ 266.541901][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5815'. [ 266.551300][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5815'. [ 266.608437][T17905] syzkaller0: entered promiscuous mode [ 266.614052][T17905] syzkaller0: entered allmulticast mode [ 266.645318][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 266.645332][ T30] audit: type=1400 audit(1742110297.541:6896): avc: denied { create } for pid=17907 comm="syz.6.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.697968][ T30] audit: type=1400 audit(1742110297.571:6897): avc: denied { connect } for pid=17907 comm="syz.6.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.949431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.199434][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.220385][ T30] audit: type=1326 audit(1742110298.061:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.244092][ T30] audit: type=1326 audit(1742110298.061:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.267596][ T30] audit: type=1326 audit(1742110298.061:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.291237][ T30] audit: type=1326 audit(1742110298.061:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.314796][ T30] audit: type=1326 audit(1742110298.061:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.338330][ T30] audit: type=1326 audit(1742110298.061:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.338359][ T30] audit: type=1326 audit(1742110298.061:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.338392][ T30] audit: type=1326 audit(1742110298.061:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17919 comm="syz.9.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7dbbd169 code=0x7ffc0000 [ 267.665021][T17922] netlink: 'syz.2.5824': attribute type 21 has an invalid length. [ 267.673685][T17922] netlink: 'syz.2.5824': attribute type 1 has an invalid length. [ 267.681498][T17922] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5824'. [ 267.751216][T17940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17940 comm=syz.6.5830 [ 267.989424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.229482][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.500787][T17961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5840'. [ 268.539090][T17965] rdma_op ffff88812954c980 conn xmit_rdma 0000000000000000 [ 268.558001][T17961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17961 comm=syz.3.5840 [ 269.039415][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.213905][T18003] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.254553][T18003] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.279424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.301099][T18003] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.400967][T18003] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.487738][T18003] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.499794][T18003] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.511798][T18003] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.523751][T18003] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.594488][T18017] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.604364][T18017] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.654713][T18018] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5859'. [ 269.665498][T18017] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.675386][T18017] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.686665][T18015] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5859'. [ 269.751063][T18017] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.760916][T18017] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.833013][T18017] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.842969][T18017] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.887703][T18017] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.896222][T18017] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.907476][T18017] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.915719][T18017] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.927073][T18017] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.935378][T18017] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.947414][T18017] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.955644][T18017] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.991439][T18027] xt_CT: No such helper "syz1" [ 270.152338][T18037] 9pnet: bogus RWRITE count (38144 > 1) [ 270.309458][ C0] net_ratelimit: 1 callbacks suppressed [ 270.309475][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.325112][T18052] loop9: detected capacity change from 0 to 512 [ 270.332982][T18052] EXT4-fs (loop9): orphan cleanup on readonly fs [ 270.340564][T18052] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5873: bg 0: block 248: padding at end of block bitmap is not set [ 270.355372][T18052] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.5873: Failed to acquire dquot type 1 [ 270.368058][T18052] EXT4-fs (loop9): 1 truncate cleaned up [ 270.374770][T18052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.393454][T18052] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.451186][T18052] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.501026][T18052] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.560189][T18052] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.627771][T18052] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.653036][T18052] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.668235][T18052] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.680939][T18067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5879'. [ 270.682127][T18052] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.713333][T18067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64544 sclass=netlink_route_socket pid=18067 comm=syz.3.5879 [ 270.730294][T10992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.784575][T18076] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 270.792299][T18076] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 270.868711][T18089] netlink: 'syz.6.5891': attribute type 10 has an invalid length. [ 270.879490][T18089] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5891'. [ 270.914221][T18089] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 270.978705][T18097] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5893'. [ 271.101789][T18114] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 271.117341][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.142397][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5900'. [ 271.159098][T18119] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 271.230829][T18132] loop9: detected capacity change from 0 to 128 [ 271.239759][T18132] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.252855][T18132] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.334968][T10992] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.359449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.690762][ T30] kauditd_printk_skb: 435 callbacks suppressed [ 271.690822][ T30] audit: type=1326 audit(1742110302.441:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e41bb4127 code=0x7ffc0000 [ 271.720555][ T30] audit: type=1326 audit(1742110302.441:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e41b59359 code=0x7ffc0000 [ 271.744027][ T30] audit: type=1326 audit(1742110302.441:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 271.767794][ T30] audit: type=1326 audit(1742110302.441:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e41bb4127 code=0x7ffc0000 [ 271.791375][ T30] audit: type=1326 audit(1742110302.441:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e41b59359 code=0x7ffc0000 [ 271.814796][ T30] audit: type=1326 audit(1742110302.441:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1e41bbd169 code=0x7ffc0000 [ 271.922273][ T30] audit: type=1326 audit(1742110302.741:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e41bb4127 code=0x7ffc0000 [ 271.946008][ T30] audit: type=1326 audit(1742110302.741:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e41b59359 code=0x7ffc0000 [ 271.946114][ T30] audit: type=1326 audit(1742110302.741:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e41bb4127 code=0x7ffc0000 [ 271.946181][ T30] audit: type=1326 audit(1742110302.741:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e41b59359 code=0x7ffc0000 [ 272.159436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.399490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.469554][ T1049] ================================================================== [ 272.477674][ T1049] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 272.484723][ T1049] [ 272.487038][ T1049] read-write to 0xffff888237d2e8a4 of 4 bytes by task 36 on cpu 1: [ 272.494922][ T1049] wq_worker_running+0x98/0x130 [ 272.499776][ T1049] schedule_timeout+0xb8/0x160 [ 272.504557][ T1049] msleep+0x4b/0x70 [ 272.508366][ T1049] nsim_fib_event_work+0x1fef/0x2280 [ 272.513655][ T1049] process_scheduled_works+0x4db/0xa20 [ 272.519113][ T1049] worker_thread+0x51d/0x6f0 [ 272.523727][ T1049] kthread+0x4ae/0x520 [ 272.527801][ T1049] ret_from_fork+0x4b/0x60 [ 272.532216][ T1049] ret_from_fork_asm+0x1a/0x30 [ 272.536997][ T1049] [ 272.539312][ T1049] read to 0xffff888237d2e8a4 of 4 bytes by task 1049 on cpu 0: [ 272.546846][ T1049] kick_pool+0x4d/0x2c0 [ 272.551002][ T1049] __queue_work+0x8ef/0xba0 [ 272.555507][ T1049] queue_work_on+0xd3/0x180 [ 272.560013][ T1049] wg_queue_enqueue_per_peer_tx+0x124/0x260 [ 272.565912][ T1049] wg_packet_encrypt_worker+0x9e3/0xb80 [ 272.571462][ T1049] process_scheduled_works+0x4db/0xa20 [ 272.576917][ T1049] worker_thread+0x51d/0x6f0 [ 272.581504][ T1049] kthread+0x4ae/0x520 [ 272.585573][ T1049] ret_from_fork+0x4b/0x60 [ 272.589988][ T1049] ret_from_fork_asm+0x1a/0x30 [ 272.594757][ T1049] [ 272.597073][ T1049] value changed: 0x00000000 -> 0x00000001 [ 272.602779][ T1049] [ 272.605095][ T1049] Reported by Kernel Concurrency Sanitizer on: [ 272.611241][ T1049] CPU: 0 UID: 0 PID: 1049 Comm: kworker/0:2 Tainted: G W 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 272.623478][ T1049] Tainted: [W]=WARN [ 272.627287][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.637355][ T1049] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 272.643865][ T1049] ================================================================== [ 272.721249][T18170] netlink: 'syz.3.5919': attribute type 21 has an invalid length. [ 272.729284][T18170] netlink: 'syz.3.5919': attribute type 1 has an invalid length. [ 272.737093][T18170] __nla_validate_parse: 2 callbacks suppressed [ 272.737110][T18170] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5919'. [ 273.189418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.429418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.509435][ C1] net_ratelimit: 3 callbacks suppressed [ 275.509466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.309442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.549523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.349470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.599418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.399459][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.639492][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.429429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.669441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.469417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.709479][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.509423][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.749413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available