last executing test programs: 2m18.498057266s ago: executing program 0 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 2m18.463818137s ago: executing program 0 (id=131): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2m18.358761921s ago: executing program 0 (id=132): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1080, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 2m18.301810974s ago: executing program 0 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 2m18.16660527s ago: executing program 0 (id=135): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 2m17.839395794s ago: executing program 0 (id=138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m17.785627607s ago: executing program 32 (id=138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m2.273220866s ago: executing program 5 (id=324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x40) 2m1.797520817s ago: executing program 5 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000580)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0) close(r2) 2m1.747704449s ago: executing program 5 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m1.656044383s ago: executing program 5 (id=344): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000000180)=ANY=[], 0x3, 0x348, &(0x7f0000000d00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 2m1.472409021s ago: executing program 5 (id=338): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20010010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) 2m1.215739062s ago: executing program 5 (id=345): r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0043, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 2m1.161257305s ago: executing program 33 (id=345): r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0043, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 1m48.294169268s ago: executing program 4 (id=544): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) 1m48.087451007s ago: executing program 4 (id=549): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0x0) 1m47.982748001s ago: executing program 4 (id=551): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1m47.756328631s ago: executing program 4 (id=553): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ptrace$poke(0x5, r1, &(0x7f0000000280), 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x80, 0x2, 0x11a}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r3, 0xdb4, 0xfffffffd, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x38) 1m47.420424287s ago: executing program 4 (id=556): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m46.64073161s ago: executing program 4 (id=566): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m46.64053535s ago: executing program 34 (id=566): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.143702742s ago: executing program 6 (id=1744): io_setup(0xc, &(0x7f0000000100)=0x0) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = dup(r3) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1b) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x88c0) r6 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fb, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, 0x61, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x1}) 2.915443092s ago: executing program 6 (id=1745): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_read_part_table(0x5ff, &(0x7f0000000600)="$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") open_tree(0xffffffffffffffff, 0x0, 0x1) 2.636654954s ago: executing program 1 (id=1747): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.556332818s ago: executing program 1 (id=1748): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.425386124s ago: executing program 1 (id=1750): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) r3 = signalfd(r0, &(0x7f00000002c0)={[0xe]}, 0x8) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="1b8797a8131b"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xeed}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xd}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2008404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@resgid}]}, 0x3, 0x441, &(0x7f0000000440)="$eJzs3MtvG0UYAPBv10lLXyRUpdAHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QXWQaBRBQKgcUSXuiCMSfwEHBBcEnJC4wh1VqlAuLZyM1vYmjmuncepkC/79pI1ndseZ+bw79sxOnAD61kj2I4nYHRG/R8RQPbu6wEj94ebSwtTfSwtTSVSrb/6V1MrdWFqYyovmz9uVZwYi0k+TONSm3srl+fOT5fLMpUZ+bO7Ce2OVy/PPnrsweXbm7MzFiVOnThwff/7kxHM9iTOL68bBD2cPH3j17auvT52++s7P3yR5/C1x9MjIWgefqFZ7XF2x9jSlk4ECG0JXSvVuGoO1/j8UpVg5eUPxyieFNg7YVNVqtbo/4rsOhxerwP9YEkW3AChG/kGfzX/zbetGH8W7/mJ9ApTFfbOx1Y8MRNooM9gyv+2lkYg4vfjPl9kWm3MfAgBgle+z8c8z7cZ/aexvKndvYw1lOCLui4i9EXEyIvZFxP0RtbIPRMSDXdbfukhy6/gnvdb+mdu7rKm9bPz3QmNta/X4Lx/9xXCpkdtTi38wOXOuPHOs8ZocjcHtWX58jTp+ePm3zzsdax7/ZVtWf/a4sjqUXhtoCXV6cm7yjoJucv3jiIMD7eJPllcCkog4EBEHN1jHuae+PtzpWKf41/WLe7DOVP0q4sn6+V+Mlvhzydrrk2P3RHnm2Fh+Vdzql1+vvNGp/juKvwey87+z7fW/HP9w0rxeW+m+jit/fNZxTnP7+Ntf/9uSt1bt+2Bybu7SeMS25LV6o5v3T7SUm1gpn8V/9Ej7/r83Vl6JQxGRXcQPRcTDEfFIo+2PRsRjEXFkjfh/eunxdzce/+bK4p/u6vyvJLZF6572idL5H79dVelwN/Fn5/9ELXW0sWc973/radfGrmYAAAD470kjYnck6ehyOk1HR+t/w78vdqbl2crc02dm3784Xf+OwHAMpvmdrqGm+6HjjWl9np9oyR9v3Df+orSjlh+dmi1PFx089LldHfp/5s9S0a0DNp3va0H/0v+hf+n/0L/0f+hfbfr/jiLaAWy9dp//HxXQDmDrtfR/y37QR8z/oX/p/9C/9H/oS5UdcfsvyUsUncj/GcPd0p7K5flI74pmSGxSouA3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75NwAA//9wCOUr") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2.364763477s ago: executing program 1 (id=1752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f00000008c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 2.297904599s ago: executing program 1 (id=1757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000008122c20000000000850000006d00008018110d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008512be3a98a0efc7779f739fc9731aed6be6ef0a718e416af08914d55d744ad1d169f2a9c391e45cf47f8f0d61de39c426dda62761402aba5b73ce7db923bcf1fd3701381937f92fc1a999599996cc24a67a50e686e7956fdc6016d1a7a39cb0e8b3935bc6c4f23bbb49888605083e5b809f2f96aef25238ad9714657663f1dc337d92e3463524bd7a40e47c06bb79557a2d6b242e", @ANYRES64, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r4, 0x6, 0x9fd, 0x3) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") 2.079543779s ago: executing program 1 (id=1760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x80d, 0x34ef}) io_setup(0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)) 2.079225669s ago: executing program 6 (id=1761): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800"/97], 0x138) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execve(0x0, 0x0, 0x0) 2.031612671s ago: executing program 6 (id=1762): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') pread64(r3, &(0x7f0000000480)=""/177, 0xb1, 0xa6) 1.564088651s ago: executing program 3 (id=1768): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x5}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 1.563602861s ago: executing program 3 (id=1769): socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendto$inet(r0, &(0x7f0000000880)="dc3ae316829fedf526cf21187a2d61dc4d2c8b20dba270256644c93380cc43409ac5eff08daf743a514a94cce6f3698a4bf087fb39c2183ffc4a1fd1e640dbcffa796730f52cab640f6577d5f0b8464a7cc97a27e7290d027aea36fa68ecadbd", 0x60, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000003c0000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.483419885s ago: executing program 3 (id=1770): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x3, 0x9d, &(0x7f0000000980)=""/157, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0x1, 0x4a0c, 0x4add}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 1.475843186s ago: executing program 3 (id=1771): timer_create(0x2, &(0x7f00000006c0)={0x0, 0x11, 0x2}, &(0x7f0000000540)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000280)="a979d76acc8b1ad4c8007b5b08001f9ee8ce7e7d8b3a24f037e8c1b0ab71dcb9f26d", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.169958879s ago: executing program 6 (id=1779): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 913.08076ms ago: executing program 3 (id=1791): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 853.503383ms ago: executing program 3 (id=1793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 519.389697ms ago: executing program 2 (id=1800): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0xee01, 0x0) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") creat(0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 518.982157ms ago: executing program 2 (id=1801): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) fchownat(r0, 0x0, 0x0, 0xee01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) 507.190488ms ago: executing program 2 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x4, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d410a8b089b3f36356d030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a5e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c1071231cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94c8598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00", 0x1000}}, 0x1006) write$selinux_create(0xffffffffffffffff, &(0x7f0000000340)=@objname={'system_u:object_r:pinentry_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x1000, 0x20, './file0\x00'}, 0x51) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000800)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0xffffd000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 364.527994ms ago: executing program 2 (id=1804): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xff5, 0x200001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 363.507094ms ago: executing program 7 (id=1805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb8, 0x100000000}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 343.922755ms ago: executing program 7 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 328.156115ms ago: executing program 7 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x44}}, 0x0) 275.507998ms ago: executing program 6 (id=1808): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r4 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 186.924102ms ago: executing program 2 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) 173.803263ms ago: executing program 7 (id=1810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 167.948553ms ago: executing program 2 (id=1811): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0x1ee}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0xfffffffe, 0x58d, 0x0, 0x80000000}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 114.864055ms ago: executing program 7 (id=1812): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) 0s ago: executing program 7 (id=1813): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): =202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 103.326531][ T6650] loop1: detected capacity change from 0 to 1024 [ 103.383311][ T29] audit: type=1326 audit(1765308384.890:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 103.406936][ T29] audit: type=1326 audit(1765308384.890:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 103.426720][ T6650] EXT4-fs: Ignoring removed orlov option [ 103.430339][ T29] audit: type=1326 audit(1765308384.890:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e8b6ff783 code=0x7ffc0000 [ 103.459302][ T29] audit: type=1326 audit(1765308384.890:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e8b6fe1ff code=0x7ffc0000 [ 103.482615][ T29] audit: type=1326 audit(1765308384.890:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e8b6ff7d7 code=0x7ffc0000 [ 103.505924][ T29] audit: type=1326 audit(1765308384.900:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e8b6fdf90 code=0x7ffc0000 [ 103.529274][ T29] audit: type=1326 audit(1765308384.900:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e8b6ff34b code=0x7ffc0000 [ 103.573554][ T6650] EXT4-fs mount: 1 callbacks suppressed [ 103.573638][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.623378][ T29] audit: type=1326 audit(1765308385.000:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e8b6fe3aa code=0x7ffc0000 [ 103.646579][ T29] audit: type=1326 audit(1765308385.000:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e8b6fe3aa code=0x7ffc0000 [ 103.843499][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.515390][ T6697] netlink: 'syz.6.790': attribute type 27 has an invalid length. [ 104.579936][ T6699] xt_hashlimit: max too large, truncated to 1048576 [ 104.587481][ T6699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.661050][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 104.691812][ T6697] geneve2: left promiscuous mode [ 104.697174][ T6697] geneve2: left allmulticast mode [ 104.747459][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.764910][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.784121][ T6705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.803294][ T296] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 104.811839][ T296] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.823289][ T296] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 104.831933][ T296] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.895093][ T1852] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 104.903725][ T1852] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.920551][ T1852] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 104.929173][ T1852] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.973124][ T6721] netlink: 'syz.1.808': attribute type 27 has an invalid length. [ 104.985928][ T6715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.034376][ T3402] Process accounting resumed [ 105.074795][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.088200][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.097909][ T6724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.115057][ T6715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.201322][ T6715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.242992][ T6731] loop1: detected capacity change from 0 to 128 [ 105.250211][ T6731] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.264200][ T6715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.274485][ T6731] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.343904][ T1638] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.355610][ T1638] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.374070][ T1638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.402470][ T1638] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439146][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.805'. [ 105.541988][ T6749] xt_CT: No such helper "netbios-ns" [ 105.730498][ T6756] syzkaller0: entered promiscuous mode [ 105.736101][ T6756] syzkaller0: entered allmulticast mode [ 106.307670][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 107.461569][ T6783] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.505400][ T6783] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.566447][ T6783] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.635501][ T6783] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.696787][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.709002][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.734378][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.753510][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.805103][ T6791] netlink: 64 bytes leftover after parsing attributes in process `syz.7.820'. [ 107.840438][ T6793] netlink: 'syz.7.821': attribute type 27 has an invalid length. [ 107.915794][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.926414][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.966209][ T6795] lo speed is unknown, defaulting to 1000 [ 107.981343][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.990243][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.001174][ T6797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.016793][ T1638] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.033384][ T6795] lo speed is unknown, defaulting to 1000 [ 108.040096][ T1638] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.050437][ T6795] lo speed is unknown, defaulting to 1000 [ 108.057934][ T6795] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.073416][ T1638] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.074247][ T6795] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.081904][ T1638] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.112999][ T6795] lo speed is unknown, defaulting to 1000 [ 108.127129][ T6795] lo speed is unknown, defaulting to 1000 [ 108.133758][ T6795] lo speed is unknown, defaulting to 1000 [ 108.139914][ T6795] lo speed is unknown, defaulting to 1000 [ 108.146390][ T6795] lo speed is unknown, defaulting to 1000 [ 108.231582][ T6799] loop7: detected capacity change from 0 to 1024 [ 108.241742][ T6799] EXT4-fs: Ignoring removed orlov option [ 108.251141][ T6799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.564687][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.657482][ T6815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6815 comm=syz.7.826 [ 108.716341][ T6815] netlink: 'syz.7.826': attribute type 1 has an invalid length. [ 108.745305][ T6816] lo speed is unknown, defaulting to 1000 [ 108.980074][ T6815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.220494][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.383728][ T6824] lo speed is unknown, defaulting to 1000 [ 109.396678][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 109.396694][ T29] audit: type=1400 audit(109.371:3147): avc: denied { create } for pid=6825 comm="syz.6.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 109.609706][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6845 comm=syz.1.835 [ 110.387798][ T6852] loop6: detected capacity change from 0 to 2048 [ 110.407883][ T6852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.425391][ T6850] loop1: detected capacity change from 0 to 1024 [ 110.432451][ T29] audit: type=1400 audit(110.401:3148): avc: denied { setattr } for pid=6851 comm="syz.6.838" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.454782][ T6850] EXT4-fs: Ignoring removed orlov option [ 110.472422][ T6850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.533792][ T6857] lo speed is unknown, defaulting to 1000 [ 110.548194][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.789395][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.233518][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.236147][ T6822] Bluetooth: hci0: command 0x1003 tx timeout [ 111.842671][ T4002] Process accounting resumed [ 111.882967][ T6907] lo speed is unknown, defaulting to 1000 [ 112.166861][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.859'. [ 112.195954][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.859'. [ 112.252775][ T29] audit: type=1326 audit(112.031:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.275632][ T29] audit: type=1326 audit(112.031:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.298432][ T29] audit: type=1326 audit(112.031:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.321221][ T29] audit: type=1326 audit(112.031:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.344250][ T29] audit: type=1326 audit(112.031:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.367093][ T29] audit: type=1326 audit(112.031:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.389847][ T29] audit: type=1326 audit(112.031:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.412569][ T29] audit: type=1326 audit(112.031:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 112.627198][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.866'. [ 112.657108][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.866'. [ 112.671658][ T6933] loop6: detected capacity change from 0 to 1024 [ 112.688625][ T6933] EXT4-fs: Ignoring removed orlov option [ 112.717858][ T6933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.952825][ T6941] loop7: detected capacity change from 0 to 1024 [ 112.960127][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.969742][ T6941] EXT4-fs: Ignoring removed orlov option [ 113.005399][ T6941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.216354][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.871'. [ 113.434900][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.627098][ T6964] xt_hashlimit: max too large, truncated to 1048576 [ 113.643740][ T6964] No such timeout policy "syz1" [ 113.895133][ T6977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6977 comm=syz.7.875 [ 113.926688][ T6978] loop1: detected capacity change from 0 to 1024 [ 113.956476][ T6976] loop6: detected capacity change from 0 to 8192 [ 114.012151][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.072519][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.879'. [ 114.087616][ T6965] mmap: syz.2.873 (6965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.126536][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.879'. [ 114.229000][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.405846][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 114.405865][ T29] audit: type=1400 audit(114.381:3214): avc: denied { bind } for pid=6994 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.484797][ T6995] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.548347][ T29] audit: type=1400 audit(114.461:3215): avc: denied { write } for pid=6994 comm="syz.2.884" path="socket:[17860]" dev="sockfs" ino=17860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.595324][ T6998] syzkaller0: entered promiscuous mode [ 114.600842][ T6998] syzkaller0: entered allmulticast mode [ 114.640150][ T7002] loop7: detected capacity change from 0 to 1024 [ 114.646946][ T7002] EXT4-fs: Ignoring removed bh option [ 114.656148][ T7002] EXT4-fs: inline encryption not supported [ 114.677504][ T7002] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.754159][ T7002] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 114.782786][ T7002] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.886: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.908963][ T7002] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 114.937190][ T7002] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.886: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.079875][ T7002] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 115.088814][ T7002] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.886: Failed to acquire dquot type 0 [ 115.100107][ T29] audit: type=1326 audit(115.031:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.122880][ T29] audit: type=1326 audit(115.031:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.145714][ T29] audit: type=1326 audit(115.031:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.168550][ T29] audit: type=1326 audit(115.031:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.191334][ T29] audit: type=1326 audit(115.031:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.214062][ T29] audit: type=1326 audit(115.041:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 115.243725][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 115.297389][ T7012] lo speed is unknown, defaulting to 1000 [ 115.306285][ T7002] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 115.343548][ T7002] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.886: mark_inode_dirty error [ 115.377988][ T7002] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 115.420616][ T7002] EXT4-fs (loop7): 1 orphan inode deleted [ 115.433651][ T800] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.434046][ T7002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.481512][ T800] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 115.544662][ T7022] xt_hashlimit: max too large, truncated to 1048576 [ 115.551445][ T7022] No such timeout policy "syz1" [ 115.585019][ T7002] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.655002][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.696611][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.898'. [ 115.745365][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.898'. [ 115.849839][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.899'. [ 116.044445][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.901'. [ 116.117763][ T7046] VFS: Mount too revealing [ 116.148045][ T7050] loop6: detected capacity change from 0 to 512 [ 116.155420][ T7050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.176612][ T7050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.307368][ T7058] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 116.376404][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.395353][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 116.483319][ T7058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.543502][ T7062] bond1 (unregistering): Released all slaves [ 116.592631][ T7068] netlink: 'syz.6.908': attribute type 13 has an invalid length. [ 116.768046][ T7060] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 116.924810][ T7084] netlink: 'syz.6.916': attribute type 1 has an invalid length. [ 117.100382][ T7094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.109672][ T7094] bond1: (slave bond2): making interface the new active one [ 117.119163][ T7094] bond1: (slave bond2): Enslaving as an active interface with an up link [ 117.134120][ T7084] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 117.220410][ T7098] lo speed is unknown, defaulting to 1000 [ 117.548867][ T7084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.916'. [ 117.612657][ T7084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.698363][ T7103] loop7: detected capacity change from 0 to 1024 [ 117.736892][ T7103] tipc: Started in network mode [ 117.741881][ T7103] tipc: Node identity ac14140f, cluster identity 4711 [ 117.853574][ T7103] tipc: New replicast peer: 255.255.255.255 [ 117.859582][ T7103] tipc: Enabled bearer , priority 10 [ 118.207975][ T7115] loop1: detected capacity change from 0 to 1024 [ 118.215129][ T7115] EXT4-fs: Ignoring removed orlov option [ 118.220845][ T7115] EXT4-fs: inline encryption not supported [ 118.222898][ T7114] netlink: 'syz.7.923': attribute type 10 has an invalid length. [ 118.272309][ T7115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.288237][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 118.410002][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.464431][ T7127] xt_hashlimit: max too large, truncated to 1048576 [ 118.486206][ T7127] No such timeout policy "syz1" [ 118.583877][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 118.605772][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 118.646219][ T7144] netlink: 'syz.6.935': attribute type 1 has an invalid length. [ 118.680689][ T7143] loop3: detected capacity change from 0 to 4096 [ 118.714750][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 118.779014][ T7144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.795536][ T7143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.836866][ T7133] xt_hashlimit: max too large, truncated to 1048576 [ 118.929062][ T7145] bond3 (unregistering): Released all slaves [ 118.983454][ T4002] tipc: Node number set to 2886997007 [ 119.406367][ T7175] xt_hashlimit: max too large, truncated to 1048576 [ 119.443629][ T7175] No such timeout policy "syz1" [ 119.676226][ T7185] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.730115][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.740866][ T7185] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.757003][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.951'. [ 119.784706][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.951'. [ 119.796598][ T7185] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.872823][ T7192] loop1: detected capacity change from 0 to 512 [ 119.910623][ T7185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.952806][ T7192] __quota_error: 165 callbacks suppressed [ 119.952826][ T7192] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 119.989952][ T7192] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.005258][ T29] audit: type=1326 audit(119.981:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.039406][ T2557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.047861][ T29] audit: type=1326 audit(120.031:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.047990][ T7192] EXT4-fs (loop1): mount failed [ 120.080051][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 120.090340][ T1638] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.117964][ T1638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.133158][ T29] audit: type=1326 audit(120.051:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.156043][ T29] audit: type=1326 audit(120.051:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.165267][ T1638] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.178879][ T29] audit: type=1326 audit(120.051:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.209811][ T29] audit: type=1326 audit(120.051:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.232704][ T29] audit: type=1326 audit(120.051:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.255590][ T29] audit: type=1326 audit(120.051:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.278532][ T29] audit: type=1326 audit(120.051:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 120.353612][ T7213] loop3: detected capacity change from 0 to 1024 [ 120.364975][ T7213] EXT4-fs: Ignoring removed orlov option [ 120.373084][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 120.386931][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.410292][ T7217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7217 comm=syz.1.961 [ 120.451061][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.465470][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 120.515060][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'. [ 120.582224][ T7238] loop1: detected capacity change from 0 to 164 [ 120.589624][ T7238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.601339][ T7238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.610009][ T7238] Symlink component flag not implemented [ 120.615826][ T7238] Symlink component flag not implemented [ 120.621719][ T7238] Symlink component flag not implemented (7) [ 120.627778][ T7238] Symlink component flag not implemented (116) [ 120.721953][ T7247] 9p: Invalid gid '0x00000000ffffffff' [ 120.921241][ T7256] netlink: 'syz.3.975': attribute type 12 has an invalid length. [ 120.940538][ T7258] loop1: detected capacity change from 0 to 1024 [ 120.951577][ T7258] EXT4-fs: Ignoring removed orlov option [ 120.978090][ T7258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.144307][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.168675][ T7269] dummy0: entered promiscuous mode [ 121.174686][ T7269] macsec1: entered allmulticast mode [ 121.184591][ T7269] dummy0: entered allmulticast mode [ 121.204554][ T7269] dummy0: left allmulticast mode [ 121.209662][ T7269] dummy0: left promiscuous mode [ 121.248375][ T7277] loop1: detected capacity change from 0 to 256 [ 121.267471][ T7272] lo speed is unknown, defaulting to 1000 [ 121.297564][ T7277] vfat: Unknown parameter 'ÿÿÿÿ017777777777777777777770x00000000000000030xffffffffffffffff18446744073709551615êÃz[cGÅKÆc-ïÝ ª‰"Q•˜kžµ' [ 121.339625][ T7280] netlink: 'syz.3.985': attribute type 83 has an invalid length. [ 121.566414][ T7291] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 121.911606][ T7305] lo speed is unknown, defaulting to 1000 [ 122.396061][ T7302] loop1: detected capacity change from 0 to 512 [ 122.620244][ T7302] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.992: EA inode hash validation failed [ 122.663545][ T7311] loop7: detected capacity change from 0 to 128 [ 122.736713][ T7311] netlink: zone id is out of range [ 122.741901][ T7311] netlink: zone id is out of range [ 122.774854][ T7311] netlink: zone id is out of range [ 122.780054][ T7311] netlink: zone id is out of range [ 122.785251][ T7311] netlink: zone id is out of range [ 122.790448][ T7311] netlink: zone id is out of range [ 122.795520][ T7302] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.992: corrupted inode contents [ 122.795706][ T7311] netlink: zone id is out of range [ 122.840502][ T7311] netlink: zone id is out of range [ 122.845876][ T7311] netlink: zone id is out of range [ 122.851027][ T7311] netlink: zone id is out of range [ 122.856654][ T7302] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.992: mark_inode_dirty error [ 122.874093][ T7314] netlink: 'syz.2.995': attribute type 13 has an invalid length. [ 122.993531][ T3489] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.014056][ T7302] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.992: corrupted inode contents [ 123.029760][ T7318] : renamed from team_slave_0 [ 123.113677][ T7302] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.992: mark_inode_dirty error [ 123.216202][ T7302] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.992: mark inode dirty (error -117) [ 123.233428][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.303962][ T7302] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 123.329071][ T7302] EXT4-fs (loop1): 1 orphan inode deleted [ 123.337967][ T7302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.437434][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.599450][ T7349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.733902][ T7356] __nla_validate_parse: 2 callbacks suppressed [ 123.733919][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 123.797047][ T7356] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1009'. [ 123.884053][ T3733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.952178][ T7365] lo speed is unknown, defaulting to 1000 [ 124.076454][ T7362] loop6: detected capacity change from 0 to 764 [ 124.098074][ T7362] iso9660: Unknown parameter '0xffffffffffffffff' [ 124.164120][ T7371] syzkaller0: Caught tx_queue_len zero misconfig [ 124.185397][ T7371] syzkaller0: entered promiscuous mode [ 124.191014][ T7371] syzkaller0: entered allmulticast mode [ 124.206674][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 124.241885][ T7377] loop7: detected capacity change from 0 to 1024 [ 124.259570][ T7371] tipc: Enabled bearer , priority 0 [ 124.271589][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 124.294395][ T7377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.345938][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.352047][ T7382] loop6: detected capacity change from 0 to 164 [ 124.385657][ T7382] iso9660: Unknown parameter '·' [ 124.388547][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1020'. [ 124.731562][ T7413] loop7: detected capacity change from 0 to 512 [ 124.741717][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 124.765895][ T7413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.774740][ T7413] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.782518][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 124.858582][ T7413] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1024: Allocating blocks 41-42 which overlap fs metadata [ 124.882249][ T7413] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1024: Allocating blocks 41-42 which overlap fs metadata [ 124.896344][ T7413] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1024: Failed to acquire dquot type 1 [ 124.908415][ T7413] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 124.925232][ T7413] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1024: corrupted inode contents [ 124.937957][ T7413] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.1024: mark_inode_dirty error [ 124.950136][ T7413] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1024: corrupted inode contents [ 124.965537][ T7413] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.1024: mark_inode_dirty error [ 124.977319][ T7413] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1024: corrupted inode contents [ 124.989662][ T7413] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 124.998634][ T7413] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1024: corrupted inode contents [ 125.010864][ T7413] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.1024: mark_inode_dirty error [ 125.022568][ T7413] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 125.031797][ T7413] EXT4-fs (loop7): 1 truncate cleaned up [ 125.038171][ T7413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.084727][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.145940][ T7430] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 125.626788][ T7442] netlink: 'syz.7.1041': attribute type 13 has an invalid length. [ 125.837136][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 125.866703][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1043'. [ 125.932582][ T7457] futex_wake_op: syz.7.1046 tries to shift op by 535; fix this program [ 125.946970][ T7457] loop7: detected capacity change from 0 to 512 [ 125.957785][ T7457] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 125.968707][ T7457] EXT4-fs (loop7): orphan cleanup on readonly fs [ 125.975447][ T7457] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.1046: Block bitmap for bg 0 marked uninitialized [ 125.988985][ T7457] EXT4-fs (loop7): Remounting filesystem read-only [ 125.995896][ T7457] EXT4-fs (loop7): 1 orphan inode deleted [ 126.002074][ T7457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.036033][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.056796][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1047'. [ 126.089990][ T7461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7461 comm=syz.7.1047 [ 126.869056][ T7631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.876381][ T7631] IPv6: NLM_F_CREATE should be set when creating new route [ 126.894781][ T7631] lo: entered allmulticast mode [ 126.900845][ T7631] tunl0: entered allmulticast mode [ 126.907235][ T7631] gre0: entered allmulticast mode [ 126.917296][ T7631] gretap0: entered allmulticast mode [ 126.939049][ T7631] erspan0: entered allmulticast mode [ 126.970615][ T7635] sd 0:0:1:0: device reset [ 126.977952][ T7631] ip_vti0: entered allmulticast mode [ 127.019160][ T7637] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 127.040817][ T7631] ip6_vti0: entered allmulticast mode [ 127.065135][ T7631] sit0: entered allmulticast mode [ 127.071473][ T7640] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 127.082092][ T7631] ip6tnl0: entered allmulticast mode [ 127.089096][ T7631] ip6gre0: entered allmulticast mode [ 127.097098][ T7631] syz_tun: entered allmulticast mode [ 127.103859][ T7631] ip6gretap0: entered allmulticast mode [ 127.110593][ T7631] vcan0: entered allmulticast mode [ 127.117336][ T7631] bond0: entered allmulticast mode [ 127.122575][ T7631] bond_slave_0: entered allmulticast mode [ 127.128373][ T7631] bond_slave_1: entered allmulticast mode [ 127.141960][ T7631] team0: entered allmulticast mode [ 127.147208][ T7631] team_slave_0: entered allmulticast mode [ 127.153034][ T7631] team_slave_1: entered allmulticast mode [ 127.160076][ T7631] dummy0: entered allmulticast mode [ 127.165725][ T7631] nlmon0: entered allmulticast mode [ 127.173595][ T7631] caif0: entered allmulticast mode [ 127.178817][ T7631] batadv0: entered allmulticast mode [ 127.184365][ T7631] vxcan0: entered allmulticast mode [ 127.189756][ T7631] vxcan1: entered allmulticast mode [ 127.195148][ T7631] veth0: entered allmulticast mode [ 127.200334][ T7631] veth1: entered allmulticast mode [ 127.205513][ T7631] wg0: entered allmulticast mode [ 127.210545][ T7631] wg1: entered allmulticast mode [ 127.215588][ T7631] wg2: entered allmulticast mode [ 127.220634][ T7631] veth0_to_bridge: entered allmulticast mode [ 127.226785][ T7631] bridge_slave_0: entered allmulticast mode [ 127.232847][ T7631] veth1_to_bridge: entered allmulticast mode [ 127.238996][ T7631] bridge_slave_1: entered allmulticast mode [ 127.245076][ T7631] veth0_to_bond: entered allmulticast mode [ 127.251075][ T7631] veth1_to_bond: entered allmulticast mode [ 127.257080][ T7631] veth0_to_team: entered allmulticast mode [ 127.263101][ T7631] veth1_to_team: entered allmulticast mode [ 127.269145][ T7631] veth0_to_batadv: entered allmulticast mode [ 127.275382][ T7631] batadv_slave_0: entered allmulticast mode [ 127.281429][ T7631] veth1_to_batadv: entered allmulticast mode [ 127.287571][ T7631] batadv_slave_1: entered allmulticast mode [ 127.293635][ T7631] xfrm0: entered allmulticast mode [ 127.298953][ T7631] veth0_to_hsr: entered allmulticast mode [ 127.304902][ T7631] hsr_slave_0: entered allmulticast mode [ 127.310599][ T7631] veth1_to_hsr: entered allmulticast mode [ 127.316453][ T7631] hsr_slave_1: entered allmulticast mode [ 127.322216][ T7631] hsr0: entered allmulticast mode [ 127.327443][ T7631] veth1_virt_wifi: entered allmulticast mode [ 127.333525][ T7631] veth0_virt_wifi: entered allmulticast mode [ 127.339656][ T7631] veth1_vlan: entered allmulticast mode [ 127.345317][ T7631] veth0_vlan: entered allmulticast mode [ 127.350917][ T7631] vlan0: entered allmulticast mode [ 127.356158][ T7631] vlan1: entered allmulticast mode [ 127.361425][ T7631] macvlan0: entered allmulticast mode [ 127.366891][ T7631] macvlan1: entered allmulticast mode [ 127.372353][ T7631] ipvlan0: entered allmulticast mode [ 127.377768][ T7631] ipvlan1: entered allmulticast mode [ 127.383107][ T7631] geneve0: entered allmulticast mode [ 127.388600][ T7631] geneve1: entered allmulticast mode [ 127.394169][ T7631] bond1: entered allmulticast mode [ 127.413165][ T7631] bond2: entered allmulticast mode [ 127.419931][ T7631] bridge0: entered allmulticast mode [ 127.426353][ T7631] veth2: entered allmulticast mode [ 127.431704][ T7631] veth3: entered allmulticast mode [ 127.437437][ T7631] netdevsim netdevsim7 eth0: entered allmulticast mode [ 127.444633][ T7631] netdevsim netdevsim7 eth1: entered allmulticast mode [ 127.451778][ T7631] netdevsim netdevsim7 eth2: entered allmulticast mode [ 127.459023][ T7631] netdevsim netdevsim7 eth3: entered allmulticast mode [ 127.477033][ T7636] lo speed is unknown, defaulting to 1000 [ 127.604697][ T3499] lo speed is unknown, defaulting to 1000 [ 127.614811][ T3402] lo speed is unknown, defaulting to 1000 [ 127.630516][ T3402] Process accounting resumed [ 127.694330][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 127.694348][ T29] audit: type=1326 audit(127.671:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.733500][ T29] audit: type=1326 audit(127.671:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.756557][ T29] audit: type=1326 audit(127.671:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.779505][ T29] audit: type=1326 audit(127.671:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.802481][ T29] audit: type=1326 audit(127.671:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.825497][ T29] audit: type=1326 audit(127.671:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.848468][ T29] audit: type=1326 audit(127.671:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.871511][ T29] audit: type=1326 audit(127.681:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.894499][ T29] audit: type=1326 audit(127.681:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 127.917412][ T29] audit: type=1326 audit(127.681:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7286f749 code=0x7ffc0000 [ 128.112485][ T7664] net_ratelimit: 23 callbacks suppressed [ 128.112508][ T7664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.345091][ T7713] lo speed is unknown, defaulting to 1000 [ 129.826805][ T7752] lo: Caught tx_queue_len zero misconfig [ 130.144638][ T7801] loop6: detected capacity change from 0 to 512 [ 130.169648][ T7801] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.208576][ T7808] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 130.220680][ T7801] EXT4-fs (loop6): 1 truncate cleaned up [ 130.229050][ T7808] __nla_validate_parse: 6 callbacks suppressed [ 130.229066][ T7808] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1091'. [ 130.231196][ T7801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.261448][ T7808] 0ªX¹¦À: renamed from caif0 [ 130.276631][ T7808] 0ªX¹¦À: entered allmulticast mode [ 130.281905][ T7808] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 130.319160][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.397414][ T7813] lo speed is unknown, defaulting to 1000 [ 130.564685][ T7833] netlink: 'syz.6.1101': attribute type 4 has an invalid length. [ 130.587917][ T7822] loop1: detected capacity change from 0 to 1024 [ 130.596579][ T7822] EXT4-fs: Ignoring removed orlov option [ 130.613038][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.625985][ T7837] netlink: 'syz.6.1101': attribute type 4 has an invalid length. [ 130.814188][ T7853] netlink: 'syz.7.1102': attribute type 1 has an invalid length. [ 130.911180][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.000687][ T7853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.313729][ T7876] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1108'. [ 131.569287][ T7884] loop1: detected capacity change from 0 to 2048 [ 131.585272][ T7884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.623402][ T7884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.780965][ T7893] bridge_slave_0: left allmulticast mode [ 131.787118][ T7893] bridge_slave_0: left promiscuous mode [ 131.793754][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.802791][ T7893] bridge_slave_1: left allmulticast mode [ 131.808941][ T7893] bridge_slave_1: left promiscuous mode [ 131.815488][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.827812][ T7893] bond0: (slave bond_slave_0): Releasing backup interface [ 131.840912][ T7893] bond0: (slave bond_slave_1): Releasing backup interface [ 131.851354][ T7893] team0: Port device team_slave_0 removed [ 131.859315][ T7893] team0: Port device team_slave_1 removed [ 131.866241][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.878669][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.889269][ T7893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.024767][ T7900] loop1: detected capacity change from 0 to 512 [ 132.032586][ T7900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.064697][ T7900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.137318][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.146560][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 132.213032][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7908 comm=syz.1.1118 [ 132.230447][ T7903] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 132.238493][ T7903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1115'. [ 132.262473][ T7903] .`: renamed from bond0 (while UP) [ 132.354131][ T7915] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1122'. [ 132.363298][ T7915] unsupported nla_type 55308 [ 132.372308][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.453591][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.541766][ T7920] lo speed is unknown, defaulting to 1000 [ 132.798383][ T7922] syzkaller0: entered promiscuous mode [ 132.804006][ T7922] syzkaller0: entered allmulticast mode [ 133.016277][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1134'. [ 133.028219][ T7928] lo speed is unknown, defaulting to 1000 [ 133.051209][ T7931] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 133.257612][ T7944] .`: (slave bond_slave_0): Releasing backup interface [ 133.270607][ T7944] team0: Port device  removed [ 133.293158][ T7944] team0: Port device team_slave_1 removed [ 133.299169][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1131'. [ 133.309936][ T7944] .`: (slave batadv_slave_0): Releasing backup interface [ 133.331851][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.478397][ T7944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.682583][ T3422] Process accounting resumed [ 133.808512][ T7963] netlink: 'syz.1.1136': attribute type 39 has an invalid length. [ 134.026502][ T3733] Process accounting resumed [ 134.061843][ T7976] lo speed is unknown, defaulting to 1000 [ 134.653144][ T7991] loop1: detected capacity change from 0 to 512 [ 134.674527][ T7991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.692970][ T7991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1144: bg 0: block 127: padding at end of block bitmap is not set [ 134.748641][ T7991] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1144: iget: bad extra_isize 512 (inode size 256) [ 134.783521][ T7991] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1144: error while reading EA inode 11 err=-117 [ 134.796379][ T7991] EXT4-fs (loop1): 1 orphan inode deleted [ 134.802647][ T7991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.804260][ T7994] loop7: detected capacity change from 0 to 128 [ 134.884485][ T7994] FAT-fs (loop7): Directory bread(block 32) failed [ 134.904404][ T7994] FAT-fs (loop7): Directory bread(block 33) failed [ 134.914604][ T7994] FAT-fs (loop7): Directory bread(block 34) failed [ 134.921161][ T7994] FAT-fs (loop7): Directory bread(block 35) failed [ 134.934547][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.952125][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 134.963756][ T7994] FAT-fs (loop7): Directory bread(block 36) failed [ 134.970395][ T7994] FAT-fs (loop7): Directory bread(block 37) failed [ 134.977436][ T7994] FAT-fs (loop7): Directory bread(block 38) failed [ 135.013826][ T7994] FAT-fs (loop7): Directory bread(block 39) failed [ 135.030596][ T7994] FAT-fs (loop7): Directory bread(block 40) failed [ 135.049754][ T7994] FAT-fs (loop7): Directory bread(block 41) failed [ 135.278814][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.278814][ T7998] loop7: rw=8390657, sector=4108, nr_sectors = 4 limit=128 [ 135.292678][ T7998] Buffer I/O error on dev loop7, logical block 1027, lost async page write [ 135.306319][ T8016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 135.325173][ T8016] ip6erspan0: entered promiscuous mode [ 135.392307][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.392307][ T7998] loop7: rw=8390657, sector=4124, nr_sectors = 4 limit=128 [ 135.406217][ T7998] Buffer I/O error on dev loop7, logical block 1031, lost async page write [ 135.544718][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.544718][ T7998] loop7: rw=2049, sector=4136, nr_sectors = 16 limit=128 [ 135.593576][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.593576][ T7998] loop7: rw=2049, sector=4160, nr_sectors = 8 limit=128 [ 135.694336][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.694336][ T7998] loop7: rw=2049, sector=4176, nr_sectors = 8 limit=128 [ 135.743053][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.743053][ T7998] loop7: rw=2049, sector=4192, nr_sectors = 8 limit=128 [ 135.757496][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.757496][ T7998] loop7: rw=2049, sector=4208, nr_sectors = 8 limit=128 [ 135.791201][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.791201][ T7998] loop7: rw=2049, sector=4224, nr_sectors = 8 limit=128 [ 135.863507][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.863507][ T7998] loop7: rw=2049, sector=4240, nr_sectors = 8 limit=128 [ 135.939385][ T7998] syz.7.1145: attempt to access beyond end of device [ 135.939385][ T7998] loop7: rw=2049, sector=4256, nr_sectors = 8 limit=128 [ 136.397066][ T8037] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 136.397081][ T8036] loop6: detected capacity change from 0 to 512 [ 136.399953][ T8036] EXT4-fs: inline encryption not supported [ 136.454138][ T8036] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.473777][ T8036] EXT4-fs (loop6): 1 truncate cleaned up [ 136.485090][ T8036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.562610][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.632055][ T8048] netlink: 'syz.6.1162': attribute type 4 has an invalid length. [ 136.634945][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 136.641565][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1163'. [ 136.689405][ T8045] loop7: detected capacity change from 0 to 512 [ 136.706273][ T8045] journal_path: Non-blockdev passed as './bus' [ 136.712739][ T8045] EXT4-fs: error: could not find journal device path [ 136.747098][ T8055] lo speed is unknown, defaulting to 1000 [ 136.775055][ T8058] netlink: 'syz.1.1166': attribute type 21 has an invalid length. [ 136.823947][ T8058] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 136.831753][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1166'. [ 136.854140][ T3733] IPVS: starting estimator thread 0... [ 136.870014][ T8064] veth0: Caught tx_queue_len zero misconfig [ 136.894281][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 136.894298][ T29] audit: type=1400 audit(392.869:3949): avc: denied { create } for pid=8067 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.943655][ T8066] IPVS: using max 2208 ests per chain, 110400 per kthread [ 136.955212][ T8070] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.009247][ T3489] Process accounting resumed [ 137.035771][ T29] audit: type=1400 audit(393.009:3950): avc: denied { listen } for pid=8077 comm="syz.1.1173" laddr=::ac14:140b lport=43462 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.099187][ T8070] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.150611][ T29] audit: type=1400 audit(393.119:3951): avc: denied { module_load } for pid=8081 comm="syz.7.1176" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 137.177745][ T8084] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 137.182814][ T8082] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.194650][ T8082] team0: Device ipvlan2 is already an upper device of the team interface [ 137.235210][ T8070] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.316310][ T8070] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.359899][ T8090] syz_tun: entered promiscuous mode [ 137.393449][ T8090] macvlan2: entered allmulticast mode [ 137.398924][ T8090] syz_tun: entered allmulticast mode [ 137.422225][ T8090] syz_tun: left allmulticast mode [ 137.427386][ T8090] syz_tun: left promiscuous mode [ 137.434672][ T8099] netlink: 'syz.7.1182': attribute type 39 has an invalid length. [ 137.452869][ T910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.519488][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 137.529126][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 137.574943][ T8103] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1184'. [ 137.690676][ T910] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.704980][ T910] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.714034][ T910] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.766259][ T29] audit: type=1326 audit(2953.729:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.789462][ T29] audit: type=1326 audit(2953.739:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.812523][ T29] audit: type=1326 audit(2953.739:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.835479][ T29] audit: type=1326 audit(2953.739:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.858551][ T29] audit: type=1326 audit(2953.739:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.881520][ T29] audit: type=1326 audit(2953.739:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 137.904483][ T29] audit: type=1326 audit(2953.739:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.3.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39be40f749 code=0x7ffc0000 [ 138.030254][ T8123] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 138.038921][ T8123] team0: Device ipvlan0 is already an upper device of the team interface [ 138.274396][ T8138] ÿ: renamed from bond_slave_0 [ 138.316487][ T8141] syz_tun: entered promiscuous mode [ 138.330162][ T8141] macvlan2: entered allmulticast mode [ 138.335743][ T8141] syz_tun: entered allmulticast mode [ 138.343739][ T8141] syz_tun: left allmulticast mode [ 138.348916][ T8141] syz_tun: left promiscuous mode [ 138.465651][ T8145] lo speed is unknown, defaulting to 1000 [ 139.160253][ T8162] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.169235][ T8162] team0: Device ipvlan2 is already an upper device of the team interface [ 139.347370][ T8174] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1208'. [ 139.356424][ T8176] loop6: detected capacity change from 0 to 128 [ 139.372392][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1213'. [ 139.385327][ T8176] veth0: entered promiscuous mode [ 139.391063][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1212'. [ 139.401399][ T8176] veth0 (unregistering): left promiscuous mode [ 139.512872][ T8189] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 139.531982][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.551854][ T8189] bond0: entered allmulticast mode [ 139.564927][ T8189] bond0: (slave ip6gretap0): making interface the new active one [ 139.572744][ T8189] ip6gretap0: entered allmulticast mode [ 139.579412][ T8189] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 139.674265][ T8195] syz_tun: entered promiscuous mode [ 139.680143][ T8195] macvlan2: entered allmulticast mode [ 139.685656][ T8195] syz_tun: entered allmulticast mode [ 139.692806][ T8195] syz_tun: left allmulticast mode [ 139.697964][ T8195] syz_tun: left promiscuous mode [ 139.869270][ T8199] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.890014][ T8199] team0: Device ipvlan2 is already an upper device of the team interface [ 140.244602][ T8209] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.306115][ T8209] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.375345][ T8209] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.436343][ T8209] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.773250][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1226'. [ 140.823644][ T8221] netlink: 'syz.7.1227': attribute type 16 has an invalid length. [ 140.831578][ T8221] netlink: 'syz.7.1227': attribute type 17 has an invalid length. [ 140.839937][ T8221] lo: left allmulticast mode [ 140.846634][ T8221] tunl0: left allmulticast mode [ 140.852939][ T8221] gre0: left allmulticast mode [ 140.860885][ T8221] gretap0: left allmulticast mode [ 140.867855][ T8221] erspan0: left allmulticast mode [ 140.874629][ T8221] ip_vti0: left allmulticast mode [ 140.881064][ T8221] ip6_vti0: left allmulticast mode [ 140.887980][ T8221] sit0: left allmulticast mode [ 140.898607][ T8221] ip6tnl0: left allmulticast mode [ 140.905520][ T8221] ip6gre0: left allmulticast mode [ 140.912232][ T8221] syz_tun: left allmulticast mode [ 140.919816][ T8221] ip6gretap0: left allmulticast mode [ 140.926747][ T8221] vcan0: left allmulticast mode [ 140.933183][ T8221] bond0: left allmulticast mode [ 140.939202][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.949701][ T8221] team0: left allmulticast mode [ 140.955648][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.964550][ T8221] dummy0: left allmulticast mode [ 140.971231][ T8221] nlmon0: left allmulticast mode [ 140.978466][ T8221] caif0: left allmulticast mode [ 140.983401][ T8221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.205721][ T8228] loop6: detected capacity change from 0 to 164 [ 141.217161][ T8228] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.240257][ T8228] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.249439][ T8228] Symlink component flag not implemented [ 141.255236][ T8228] Symlink component flag not implemented [ 141.334125][ T8231] syz_tun: entered promiscuous mode [ 141.339485][ T8228] Symlink component flag not implemented (7) [ 141.345624][ T8228] Symlink component flag not implemented (116) [ 141.366706][ T8231] macvlan2: entered allmulticast mode [ 141.372178][ T8231] syz_tun: entered allmulticast mode [ 141.378886][ T8231] syz_tun: left allmulticast mode [ 141.384174][ T8231] syz_tun: left promiscuous mode [ 141.539529][ T8252] netlink: 'syz.7.1239': attribute type 1 has an invalid length. [ 141.640193][ T8252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.658152][ T8256] bond4: entered allmulticast mode [ 141.685135][ T8252] bond4: (slave ip6gretap1): making interface the new active one [ 141.693003][ T8252] ip6gretap1: entered allmulticast mode [ 141.699508][ T8252] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.779145][ T8263] loop7: detected capacity change from 0 to 128 [ 141.801749][ T8263] veth0: entered promiscuous mode [ 141.807821][ T8263] __nla_validate_parse: 2 callbacks suppressed [ 141.807834][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1243'. [ 141.823957][ T8263] veth0 (unregistering): left promiscuous mode [ 141.998334][ T800] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.011589][ T800] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.024887][ T1852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.044077][ T1852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.450298][ T8281] loop1: detected capacity change from 0 to 512 [ 142.457776][ T8281] EXT4-fs: Ignoring removed i_version option [ 142.464013][ T8281] EXT4-fs: Ignoring removed bh option [ 142.477104][ T8281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.493115][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'. [ 142.502549][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1249'. [ 142.522882][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.969023][ T8300] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 143.025903][ T8300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.031765][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 143.031785][ T29] audit: type=1326 audit(2958.999:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.069501][ T8303] loop6: detected capacity change from 0 to 512 [ 143.077892][ T8305] lo speed is unknown, defaulting to 1000 [ 143.135132][ T8306] loop1: detected capacity change from 0 to 128 [ 143.141658][ T29] audit: type=1326 audit(2959.039:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.142432][ T8303] EXT4-fs (loop6): too many log groups per flexible block group [ 143.164738][ T29] audit: type=1326 audit(2959.039:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.172746][ T8303] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 143.195198][ T29] audit: type=1326 audit(2959.039:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.202457][ T8303] EXT4-fs (loop6): mount failed [ 143.225268][ T29] audit: type=1326 audit(2959.039:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.253096][ T29] audit: type=1326 audit(2959.039:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.276174][ T29] audit: type=1326 audit(2959.039:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.291122][ T8306] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 143.299140][ T29] audit: type=1326 audit(2959.039:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.330735][ T29] audit: type=1326 audit(2959.039:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.353783][ T29] audit: type=1326 audit(2959.039:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 143.387779][ T8300] bond3: entered allmulticast mode [ 143.465331][ T8316] loop7: detected capacity change from 0 to 128 [ 143.474875][ T8313] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1258'. [ 143.579879][ T8324] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 144.185295][ T8359] lo speed is unknown, defaulting to 1000 [ 144.650840][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1276'. [ 144.858393][ T8373] loop6: detected capacity change from 0 to 1024 [ 144.919386][ T8373] EXT4-fs: inline encryption not supported [ 144.956992][ T8375] netlink: 'syz.7.1279': attribute type 10 has an invalid length. [ 144.964969][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1279'. [ 144.988232][ T8373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.006747][ T8375] : entered promiscuous mode [ 145.012253][ T8375] bridge0: port 1() entered blocking state [ 145.018289][ T8375] bridge0: port 1() entered disabled state [ 145.024515][ T8375] : entered allmulticast mode [ 145.030028][ T8375] : left allmulticast mode [ 145.166886][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.415887][ T8397] pim6reg: entered allmulticast mode [ 145.436805][ T8397] pim6reg: left allmulticast mode [ 145.819055][ T8401] 8021q: VLANs not supported on ip6tnl0 [ 145.957996][ T8407] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1291'. [ 145.968262][ T8407] .` (unregistering): Released all slaves [ 146.103814][ T8411] lo speed is unknown, defaulting to 1000 [ 146.433860][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 146.475283][ T8425] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 146.489986][ T8425] macvlan0: entered promiscuous mode [ 146.495577][ T8425] macvlan0: entered allmulticast mode [ 146.501927][ T8425] bond3: entered promiscuous mode [ 146.507315][ T8425] bridge1: entered promiscuous mode [ 146.513057][ T8425] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 146.521145][ T8425] bond3: left promiscuous mode [ 146.525989][ T8425] bridge1: left promiscuous mode [ 146.567316][ T8430] tipc: Started in network mode [ 146.572238][ T8430] tipc: Node identity 32b79e407615, cluster identity 4711 [ 146.579660][ T8430] tipc: Enabled bearer , priority 0 [ 146.754940][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1304'. [ 146.760668][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 146.906879][ T8452] loop6: detected capacity change from 0 to 1024 [ 146.936895][ T8452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.004677][ T8452] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1311: Freeing blocks not in datazone - block = 0, count = 16 [ 147.020742][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 147.039361][ T8452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 112: padding at end of block bitmap is not set [ 147.095847][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 147.317816][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 147.519647][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.630597][ T8495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.733426][ T8496] ip6tnl0: Caught tx_queue_len zero misconfig [ 147.912719][ T8498] lo speed is unknown, defaulting to 1000 [ 148.100840][ T8498] netlink: 'syz.1.1327': attribute type 2 has an invalid length. [ 148.145738][ T8498] loop1: detected capacity change from 0 to 8192 [ 148.153878][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 148.153896][ T29] audit: type=1400 audit(2964.129:4311): avc: denied { mount } for pid=8497 comm="syz.1.1327" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 148.184133][ T8498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1327'. [ 148.249677][ T3838] tipc: Node number set to 1151508032 [ 148.264455][ T29] audit: type=1400 audit(2964.239:4312): avc: denied { write } for pid=8500 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 148.285779][ T8501] netlink: 'syz.6.1323': attribute type 1 has an invalid length. [ 148.325921][ T8501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.335945][ T29] audit: type=1400 audit(2964.259:4313): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 148.392605][ T8505] bond4: (slave veth1): Enslaving as an active interface with a down link [ 148.572099][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.579538][ T8501] bond4: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 149.466238][ T29] audit: type=1400 audit(2965.439:4314): avc: denied { create } for pid=8513 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.634423][ T29] audit: type=1400 audit(2965.609:4315): avc: denied { create } for pid=8513 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.664963][ T29] audit: type=1400 audit(2965.629:4316): avc: denied { map } for pid=8514 comm="syz.1.1331" path="socket:[25642]" dev="sockfs" ino=25642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.687576][ T29] audit: type=1400 audit(2965.629:4317): avc: denied { read } for pid=8514 comm="syz.1.1331" path="socket:[25642]" dev="sockfs" ino=25642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.710454][ T29] audit: type=1400 audit(2965.629:4318): avc: denied { connect } for pid=8513 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.729840][ T29] audit: type=1400 audit(2965.629:4319): avc: denied { tracepoint } for pid=8514 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.749186][ T29] audit: type=1400 audit(2965.629:4320): avc: denied { read } for pid=8514 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.879463][ T8529] lo speed is unknown, defaulting to 1000 [ 149.906749][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1338'. [ 150.137776][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 150.146795][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 150.206449][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 150.796251][ T8560] tipc: New replicast peer: 255.255.255.255 [ 150.802423][ T8560] tipc: Enabled bearer , priority 10 [ 150.900798][ T8564] pimreg: entered allmulticast mode [ 150.935232][ T8563] pimreg: left allmulticast mode [ 151.493394][ T8582] lo speed is unknown, defaulting to 1000 [ 151.963902][ T8587] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1359'. [ 152.000111][ T8589] loop1: detected capacity change from 0 to 256 [ 152.215619][ T8598] ip6erspan0: entered promiscuous mode [ 152.446867][ T8613] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1381'. [ 152.472756][ T8613] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1381'. [ 152.620772][ T8625] ref_ctr increment failed for inode: 0x52f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888130f95e80 [ 152.757380][ T8626] loop6: detected capacity change from 0 to 512 [ 152.774051][ T8626] EXT4-fs: Ignoring removed oldalloc option [ 152.801453][ T8626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.879723][ T8630] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 152.887772][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1377'. [ 152.899742][ T8630] : entered promiscuous mode [ 152.904930][ T8630] bridge0: port 1() entered blocking state [ 152.910871][ T8630] bridge0: port 1() entered disabled state [ 152.917179][ T8630] : entered allmulticast mode [ 152.922076][ T8630] bridge0: entered allmulticast mode [ 152.927907][ T8630] : left allmulticast mode [ 152.932477][ T8630] bridge0: left allmulticast mode [ 152.979350][ T8626] EXT4-fs (loop6): 1 truncate cleaned up [ 152.985828][ T8626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.444685][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.621703][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 153.621720][ T29] audit: type=1400 audit(2969.589:4455): avc: denied { create } for pid=8647 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.648542][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 153.662251][ T29] audit: type=1400 audit(2969.639:4456): avc: denied { write } for pid=8647 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.690356][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 153.760811][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 153.801594][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 153.837388][ T29] audit: type=1400 audit(2969.809:4457): avc: denied { read } for pid=8647 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.045406][ T29] audit: type=1400 audit(2970.019:4458): avc: denied { watch watch_reads } for pid=8657 comm="syz.6.1384" path="/179" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 154.174973][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1389'. [ 154.214152][ T29] audit: type=1400 audit(2970.189:4459): avc: denied { setopt } for pid=8666 comm="syz.7.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.259358][ T29] audit: type=1400 audit(2970.229:4460): avc: denied { read } for pid=8666 comm="syz.7.1392" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.282290][ T29] audit: type=1400 audit(2970.229:4461): avc: denied { open } for pid=8666 comm="syz.7.1392" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.482279][ T8670] tipc: Enabling of bearer rejected, already enabled [ 155.019452][ T29] audit: type=1326 audit(2970.989:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 155.053626][ T29] audit: type=1326 audit(2971.019:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 155.078643][ T8683] netlink: 'syz.7.1398': attribute type 13 has an invalid length. [ 155.095918][ T29] audit: type=1326 audit(2971.029:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 155.220458][ T8681] loop1: detected capacity change from 0 to 512 [ 155.235278][ T8681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.286838][ T8681] EXT4-fs (loop1): 1 truncate cleaned up [ 155.292997][ T8681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.503740][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.624745][ T8708] lo speed is unknown, defaulting to 1000 [ 156.573849][ C1] sd 0:0:1:0: [sda] tag#4051 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 156.584387][ C1] sd 0:0:1:0: [sda] tag#4051 CDB: Write(6) 0a 00 00 00 01 00 00 00 04 00 00 10 [ 156.784021][ T8731] lo speed is unknown, defaulting to 1000 [ 157.033463][ T8743] geneve2: entered promiscuous mode [ 157.039060][ T8743] geneve2: entered allmulticast mode [ 157.083865][ T8744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.136209][ T8744] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.245797][ T8744] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.317205][ T8744] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.405162][ T8511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.435381][ T8731] netlink: 'syz.6.1424': attribute type 2 has an invalid length. [ 157.468355][ T8511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.491936][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 157.496758][ T8511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.516928][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 157.550967][ T8731] loop6: detected capacity change from 0 to 8192 [ 157.560407][ T8731] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1424'. [ 157.570526][ T8511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.675229][ T8749] loop1: detected capacity change from 0 to 512 [ 157.682304][ T8749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.695011][ T8749] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1421: invalid block [ 157.723725][ T8749] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1421: invalid indirect mapped block 4294967295 (level 1) [ 157.759093][ T8749] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1421: invalid indirect mapped block 4294967295 (level 1) [ 157.774122][ T8749] EXT4-fs (loop1): 2 truncates cleaned up [ 157.780368][ T8749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.796643][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 157.897200][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 157.918620][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.007721][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 159.007755][ T29] audit: type=1400 audit(2974.979:4678): avc: denied { write } for pid=8774 comm="syz.1.1427" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.506841][ T29] audit: type=1400 audit(2975.479:4679): avc: denied { create } for pid=8787 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 159.584061][ T8788] netlink: 'syz.2.1432': attribute type 39 has an invalid length. [ 159.708520][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 159.805978][ T8792] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 159.909670][ T8790] macvlan2: entered promiscuous mode [ 159.915204][ T8790] macvlan2: entered allmulticast mode [ 159.949421][ T8790] bond1: entered promiscuous mode [ 159.954585][ T8790] bridge5: entered promiscuous mode [ 159.968168][ T8795] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 159.982872][ T29] audit: type=1400 audit(2975.939:4680): avc: denied { load_policy } for pid=8793 comm="syz.1.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.015244][ T8790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.040409][ T8795] SELinux: failed to load policy [ 160.055141][ T8790] bond1: left promiscuous mode [ 160.060000][ T8790] bridge5: left promiscuous mode [ 161.065603][ T8807] loop7: detected capacity change from 0 to 512 [ 161.074702][ T8807] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 161.082627][ T8807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 161.090912][ T8807] EXT4-fs (loop7): orphan cleanup on readonly fs [ 161.097614][ T8807] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.1435: iget: bad i_size value: 12154761577498 [ 161.110674][ T8807] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1435: couldn't read orphan inode 13 (err -117) [ 161.123996][ T8807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.159958][ T8807] lo speed is unknown, defaulting to 1000 [ 161.458761][ T8800] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1437'. [ 161.690572][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.766030][ T8818] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1441'. [ 162.122666][ T8839] lo speed is unknown, defaulting to 1000 [ 162.202661][ T29] audit: type=1326 audit(2978.169:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 162.229626][ T8839] loop7: detected capacity change from 0 to 128 [ 162.230415][ T8842] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.237023][ T29] audit: type=1326 audit(2978.209:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 162.268920][ T29] audit: type=1326 audit(2978.209:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 162.292733][ T29] audit: type=1326 audit(2978.209:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 162.315756][ T29] audit: type=1326 audit(2978.209:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1d9f5f749 code=0x7ffc0000 [ 162.338967][ T29] audit: type=1326 audit(2978.209:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1d9f5f783 code=0x7ffc0000 [ 162.361797][ T29] audit: type=1326 audit(2978.209:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1d9f5e1ff code=0x7ffc0000 [ 162.394129][ T8839] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 162.486869][ T8846] loop6: detected capacity change from 0 to 256 [ 162.493987][ T8846] FAT-fs (loop6): bogus number of FAT sectors [ 162.500132][ T8846] FAT-fs (loop6): Can't find a valid FAT filesystem [ 162.555260][ T8842] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.638160][ T8842] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.695032][ T8842] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.724886][ T8856] loop7: detected capacity change from 0 to 512 [ 162.732663][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1452'. [ 162.742678][ T8856] EXT4-fs: Ignoring removed oldalloc option [ 162.775909][ T8856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 162.850994][ T8862] loop1: detected capacity change from 0 to 512 [ 162.860661][ T8856] EXT4-fs (loop7): 1 truncate cleaned up [ 162.867360][ T8856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.930798][ T1852] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.969218][ T8862] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 162.977467][ T8862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 162.985567][ T8862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.992343][ T8862] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.1451: iget: bad i_size value: 12154761577498 [ 163.006915][ T8862] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1451: couldn't read orphan inode 13 (err -117) [ 163.019999][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.060538][ T8859] lo speed is unknown, defaulting to 1000 [ 163.186021][ T1852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.232192][ T1852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.291618][ T1852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.347565][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.410101][ T8870] netlink: 'syz.2.1456': attribute type 13 has an invalid length. [ 163.491358][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.581880][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.611515][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.643446][ T31] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.652068][ T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.846733][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 164.004884][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 164.014211][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 164.023183][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 164.316753][ T8898] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 164.385366][ T8902] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.429592][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 164.429611][ T29] audit: type=1400 audit(2980.399:4763): avc: denied { write } for pid=8900 comm="syz.6.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.653367][ T8904] lo speed is unknown, defaulting to 1000 [ 164.913405][ T3489] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec [ 164.958001][ T8902] loop6: detected capacity change from 0 to 512 [ 165.091823][ T29] audit: type=1326 audit(2980.949:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.114812][ T29] audit: type=1326 audit(2980.949:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.137884][ T29] audit: type=1326 audit(2980.949:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.161136][ T29] audit: type=1326 audit(2980.949:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.184134][ T29] audit: type=1326 audit(2980.949:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.207211][ T29] audit: type=1326 audit(2980.949:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.230139][ T29] audit: type=1326 audit(2980.949:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.253505][ T29] audit: type=1326 audit(2980.949:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.276438][ T29] audit: type=1326 audit(2980.949:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 165.301381][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1469'. [ 165.590959][ T8909] loop1: detected capacity change from 0 to 1024 [ 165.635954][ T8909] EXT4-fs: inline encryption not supported [ 165.682798][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.951121][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 166.018240][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 166.102346][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.127674][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 166.145951][ T8932] tipc: Enabling of bearer rejected, already enabled [ 166.178172][ T8938] loop7: detected capacity change from 0 to 1024 [ 166.205004][ T8938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.226007][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1480'. [ 166.248196][ T8938] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 166.259436][ T8938] team0 (unregistering): Port device team_slave_0 removed [ 166.267615][ T8938] team0 (unregistering): Failed to send options change via netlink (err -105) [ 166.276828][ T8938] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 166.288015][ T8938] team0 (unregistering): Port device team_slave_1 removed [ 166.371453][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.399872][ T8955] syzkaller0: entered promiscuous mode [ 166.405461][ T8955] syzkaller0: entered allmulticast mode [ 166.415519][ T8955] tipc: Enabled bearer , priority 0 [ 166.424078][ T8954] tipc: Resetting bearer [ 166.434100][ T8954] tipc: Disabling bearer [ 166.450378][ T8958] syzkaller0: entered promiscuous mode [ 166.456107][ T8958] syzkaller0: entered allmulticast mode [ 166.569924][ T8964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8964 comm=syz.7.1489 [ 166.802601][ T8968] loop1: detected capacity change from 0 to 512 [ 166.914909][ T8968] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 166.923039][ T8968] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 166.931216][ T8968] System zones: 0-1, 15-15, 18-18, 34-34 [ 166.937335][ T8968] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.943817][ T8968] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.958421][ T8968] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 166.967553][ T8968] EXT4-fs (loop1): 1 truncate cleaned up [ 166.974366][ T8968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.113937][ T8972] 9p: Bad value for 'rfdno' [ 167.337055][ T8977] tipc: New replicast peer: 255.255.255.255 [ 167.343442][ T8977] tipc: Enabled bearer , priority 10 [ 167.509322][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.552286][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.553626][ T8985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8985 comm=syz.1.1496 [ 167.572073][ T8986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.609745][ T8986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.730192][ T9000] program syz.7.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.056629][ T9004] __nla_validate_parse: 4 callbacks suppressed [ 168.056922][ T9004] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1512'. [ 168.074676][ T9004] netlink: zone id is out of range [ 168.080401][ T9004] netlink: zone id is out of range [ 168.086723][ T9004] netlink: zone id is out of range [ 168.094811][ T9004] netlink: zone id is out of range [ 168.101058][ T9004] netlink: zone id is out of range [ 168.124779][ T9004] netlink: zone id is out of range [ 168.136703][ T9004] netlink: zone id is out of range [ 168.165410][ T9004] netlink: zone id is out of range [ 168.298996][ T9009] lo speed is unknown, defaulting to 1000 [ 168.859814][ T9020] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 168.891394][ T9020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.981237][ T9020] bond2: (slave veth13): Enslaving as an active interface with a down link [ 168.990117][ T9024] tipc: Enabling of bearer rejected, already enabled [ 169.019218][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.026654][ T9020] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 169.065699][ T9026] loop1: detected capacity change from 0 to 512 [ 169.072835][ T9026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.086713][ T9026] EXT4-fs (loop1): 1 truncate cleaned up [ 169.093074][ T9026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.666768][ T9055] lo speed is unknown, defaulting to 1000 [ 170.032068][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.195319][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 170.195340][ T29] audit: type=1326 audit(2986.159:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.224589][ T29] audit: type=1326 audit(2986.159:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.247564][ T29] audit: type=1326 audit(2986.159:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.270576][ T29] audit: type=1326 audit(2986.159:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.293169][ T29] audit: type=1326 audit(2986.159:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.316089][ T29] audit: type=1326 audit(2986.159:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.338557][ T29] audit: type=1326 audit(2986.159:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.360978][ T29] audit: type=1326 audit(2986.159:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 170.476441][ T9067] lo speed is unknown, defaulting to 1000 [ 170.526318][ T9070] netlink: 'syz.7.1525': attribute type 1 has an invalid length. [ 170.554438][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1525'. [ 170.592963][ T9070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.902422][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 170.911597][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 170.920728][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.133988][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.143083][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.152181][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.312295][ T9098] loop1: detected capacity change from 0 to 1024 [ 171.338551][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.347661][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 171.381751][ T9098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.406896][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.613835][ T29] audit: type=1326 audit(2987.589:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9106 comm="syz.7.1533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1d9f5f749 code=0x0 [ 171.662773][ T9109] netlink: 'syz.6.1534': attribute type 39 has an invalid length. [ 171.671667][ T9110] netlink: 'syz.7.1533': attribute type 10 has an invalid length. [ 171.939581][ T9117] lo speed is unknown, defaulting to 1000 [ 172.139555][ T29] audit: type=1400 audit(2988.109:4866): avc: denied { ioctl } for pid=9118 comm="syz.6.1537" path="socket:[27743]" dev="sockfs" ino=27743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.487273][ T9126] veth0: entered promiscuous mode [ 172.500308][ T9126] veth0 (unregistering): left promiscuous mode [ 172.671472][ T9135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.682165][ T9135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.766190][ T9139] netlink: 'syz.2.1542': attribute type 39 has an invalid length. [ 172.838574][ T9145] netlink: 'syz.7.1544': attribute type 13 has an invalid length. [ 172.950330][ T9150] lo speed is unknown, defaulting to 1000 [ 173.351585][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.504476][ T9159] lo speed is unknown, defaulting to 1000 [ 173.620469][ T9177] __nla_validate_parse: 6 callbacks suppressed [ 173.620488][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1554'. [ 173.819509][ T9180] loop7: detected capacity change from 0 to 1024 [ 173.842566][ T9180] EXT4-fs: Ignoring removed bh option [ 173.866880][ T9177] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 173.873445][ T9177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.880961][ T9177] vhci_hcd vhci_hcd.0: Device attached [ 173.909702][ T9178] lo speed is unknown, defaulting to 1000 [ 174.087397][ T9180] EXT4-fs: inline encryption not supported [ 174.094476][ T9180] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.118081][ T3499] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 174.131004][ T9180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 174.145549][ T9180] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1554: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.160313][ T9180] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1554: lblock 0 mapped to illegal pblock 48 (length 1) [ 174.175195][ T9180] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1554: Failed to acquire dquot type 0 [ 174.186878][ T3499] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 174.210599][ T9180] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 174.220541][ T9180] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1554: mark_inode_dirty error [ 174.232584][ T9180] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 174.261097][ T9180] EXT4-fs (loop7): 1 orphan inode deleted [ 174.271659][ T9180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.354090][ T897] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.379468][ T897] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 174.398228][ T9180] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.417747][ T9180] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.1554: Invalid inode table block 1 in block_group 0 [ 174.445820][ T9180] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 174.464524][ T9180] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.1554: mark_inode_dirty error [ 174.495171][ T9184] vhci_hcd: connection reset by peer [ 174.500760][ T897] vhci_hcd vhci_hcd.7: stop threads [ 174.506054][ T897] vhci_hcd vhci_hcd.7: release socket [ 174.511553][ T897] vhci_hcd vhci_hcd.7: disconnect device [ 175.059615][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 175.132016][ T9208] lo speed is unknown, defaulting to 1000 [ 175.379718][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 175.379740][ T29] audit: type=1326 audit(2991.349:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.467744][ T29] audit: type=1326 audit(2991.389:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.490852][ T29] audit: type=1326 audit(2991.389:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.513894][ T29] audit: type=1326 audit(2991.389:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.536816][ T29] audit: type=1326 audit(2991.389:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.559930][ T29] audit: type=1326 audit(2991.399:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.583179][ T29] audit: type=1326 audit(2991.399:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.606256][ T29] audit: type=1326 audit(2991.399:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.629205][ T29] audit: type=1326 audit(2991.399:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.652021][ T29] audit: type=1326 audit(2991.409:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8b6ff749 code=0x7ffc0000 [ 175.732468][ T9213] loop1: detected capacity change from 0 to 512 [ 175.740453][ T9213] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.800294][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1566'. [ 175.817698][ T9213] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1574: Allocating blocks 41-42 which overlap fs metadata [ 175.994176][ T9222] lo speed is unknown, defaulting to 1000 [ 176.260386][ T9213] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1574: Failed to acquire dquot type 1 [ 176.313882][ T9213] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 176.457499][ T9213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1574: corrupted inode contents [ 176.509099][ T9213] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.1574: mark_inode_dirty error [ 176.534979][ T9213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1574: corrupted inode contents [ 176.587302][ T9213] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1574: mark_inode_dirty error [ 176.633945][ T9213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1574: corrupted inode contents [ 176.657490][ T9234] netlink: '+}[@': attribute type 13 has an invalid length. [ 176.669026][ T9234] gretap0: refused to change device tx_queue_len [ 176.682029][ T9234] net_ratelimit: 9 callbacks suppressed [ 176.682048][ T9234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.706650][ T9240] netlink: 'syz.6.1575': attribute type 1 has an invalid length. [ 176.725256][ T9213] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 176.743726][ T9213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1574: corrupted inode contents [ 176.756717][ T9234] netlink: '+}[@': attribute type 4 has an invalid length. [ 176.776184][ T9213] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.1574: mark_inode_dirty error [ 176.809991][ T9213] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 176.823962][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1580'. [ 176.843399][ T9213] EXT4-fs (loop1): 1 truncate cleaned up [ 176.849551][ T9213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.868561][ T9248] lo speed is unknown, defaulting to 1000 [ 176.875249][ T9213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.220476][ T9267] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 177.480416][ T9283] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 177.495988][ T9283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.512286][ T9286] netlink: 'syz.6.1593': attribute type 39 has an invalid length. [ 177.522239][ T9283] bond1: (slave geneve2): making interface the new active one [ 177.531695][ T9283] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.541931][ T1852] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.560739][ T1852] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.575356][ T1852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.584146][ T1852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.688786][ T9296] lo speed is unknown, defaulting to 1000 [ 177.807209][ T9299] lo speed is unknown, defaulting to 1000 [ 178.470110][ T9340] syzkaller0: entered promiscuous mode [ 178.475776][ T9340] syzkaller0: entered allmulticast mode [ 178.724810][ T9354] syzkaller0: entered promiscuous mode [ 178.730386][ T9354] syzkaller0: entered allmulticast mode [ 179.236329][ T3499] usb 15-1: enqueue for inactive port 0 [ 179.247653][ T3499] usb 15-1: enqueue for inactive port 0 [ 179.337160][ T3499] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 179.786696][ T9394] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 179.939394][ T9394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.239294][ T9413] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 180.239294][ T9413] The task syz.7.1638 (9413) triggered the difference, watch for misbehavior. [ 180.269842][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 180.392216][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 180.392235][ T29] audit: type=1400 audit(2996.359:5395): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.461739][ T29] audit: type=1400 audit(2996.429:5396): avc: denied { prog_load } for pid=9412 comm="syz.6.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.526967][ T29] audit: type=1400 audit(2996.459:5397): avc: denied { create } for pid=9412 comm="syz.6.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 180.547017][ T29] audit: type=1400 audit(2996.459:5398): avc: denied { prog_load } for pid=9412 comm="syz.6.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.565792][ T29] audit: type=1400 audit(2996.469:5399): avc: denied { map_create } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.584461][ T29] audit: type=1400 audit(2996.479:5400): avc: denied { prog_load } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.603120][ T29] audit: type=1400 audit(2996.479:5401): avc: denied { prog_load } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.621731][ T29] audit: type=1400 audit(2996.479:5402): avc: denied { prog_load } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.640438][ T29] audit: type=1400 audit(2996.479:5403): avc: denied { prog_load } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.659022][ T29] audit: type=1400 audit(2996.479:5404): avc: denied { prog_load } for pid=9422 comm="syz.1.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.832536][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1650'. [ 180.850926][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1650'. [ 180.944372][ T9438] lo speed is unknown, defaulting to 1000 [ 181.385292][ T9473] netlink: '+}[@': attribute type 13 has an invalid length. [ 181.417486][ T9473] gretap0: refused to change device tx_queue_len [ 181.424184][ T9473] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.470566][ T9474] netlink: 'syz.2.1665': attribute type 4 has an invalid length. [ 182.252255][ T9500] lo speed is unknown, defaulting to 1000 [ 182.975393][ T3499] IPVS: starting estimator thread 0... [ 183.024951][ T9550] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 183.057923][ T9550] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.073504][ T9545] IPVS: using max 2160 ests per chain, 108000 per kthread [ 183.099147][ T9550] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 183.169983][ T9556] bond2: (slave bridge0): Enslaving as an active interface with a down link [ 183.215117][ T9550] macvlan0: entered promiscuous mode [ 183.220482][ T9550] macvlan0: entered allmulticast mode [ 183.274256][ T9550] bond2: entered promiscuous mode [ 183.279779][ T9550] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 183.288869][ T9550] bond2: left promiscuous mode [ 183.743658][ T9581] lo speed is unknown, defaulting to 1000 [ 183.848047][ T9594] netlink: '+}[@': attribute type 13 has an invalid length. [ 183.868981][ T9594] gretap0: refused to change device tx_queue_len [ 183.889182][ T9594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.913541][ T9594] netlink: '+}[@': attribute type 4 has an invalid length. [ 184.257464][ T9621] netlink: 'syz.7.1728': attribute type 1 has an invalid length. [ 184.292024][ T9621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.398004][ T9623] ip6erspan0: entered promiscuous mode [ 184.406677][ T9623] bond6: (slave ip6erspan0): making interface the new active one [ 184.444771][ T9623] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 184.516913][ T9629] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1730'. [ 185.259325][ T9655] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 185.330340][ T9655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.352104][ T9659] 0ªX¹¦À: left allmulticast mode [ 185.360946][ T9659] tipc: Resetting bearer [ 185.367091][ T9659] syzkaller0: left promiscuous mode [ 185.372531][ T9659] syzkaller0: left allmulticast mode [ 185.384280][ T9659] bond0: left allmulticast mode [ 185.389299][ T9659] ip6gretap0: left allmulticast mode [ 185.404756][ T3838] lo speed is unknown, defaulting to 1000 [ 185.410557][ T3838] syz2: Port: 1 Link DOWN [ 185.437149][ T9655] ip6erspan0: entered promiscuous mode [ 185.518128][ T9655] bond3: (slave ip6erspan0): making interface the new active one [ 185.530528][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 185.530544][ T29] audit: type=1326 audit(3008.507:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.554348][ T9655] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 185.580206][ T29] audit: type=1326 audit(3008.537:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.603487][ T29] audit: type=1326 audit(3008.537:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.626554][ T29] audit: type=1326 audit(3008.537:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.649492][ T29] audit: type=1326 audit(3008.537:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.672454][ T29] audit: type=1326 audit(3008.537:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.695449][ T29] audit: type=1326 audit(3008.537:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.718429][ T29] audit: type=1326 audit(3008.537:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.741505][ T29] audit: type=1326 audit(3008.537:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.764465][ T29] audit: type=1326 audit(3008.537:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.6.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe92b13f749 code=0x7ffc0000 [ 185.948766][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1749'. [ 185.957882][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1749'. [ 186.005934][ T9675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9675 comm=syz.1.1750 [ 186.010603][ T9673] gretap0: entered promiscuous mode [ 186.048310][ T9673] gretap0: left promiscuous mode [ 186.375933][ T8345] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.664662][ T9708] lo speed is unknown, defaulting to 1000 [ 187.171432][ T9730] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1773'. [ 187.475076][ T9763] xt_hashlimit: max too large, truncated to 1048576 [ 187.489707][ T9763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.725071][ T9781] netlink: 'syz.2.1795': attribute type 4 has an invalid length. [ 187.732904][ T9781] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1795'. [ 187.814304][ T9783] netlink: 'syz.2.1796': attribute type 4 has an invalid length. [ 187.822124][ T9783] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1796'. [ 187.885500][ T9789] ip6t_rpfilter: unknown options [ 188.143648][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1807'. [ 188.160376][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1807'. [ 188.167519][ T9811] lo speed is unknown, defaulting to 1000 [ 188.242971][ T9813] lo speed is unknown, defaulting to 1000 [ 188.295797][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1810'. [ 188.319034][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1810'. [ 188.367411][ T9823] lo speed is unknown, defaulting to 1000 [ 188.433366][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.433410][ T6822] Bluetooth: hci0: command 0x1003 tx timeout [ 188.433548][ T44] ================================================================== [ 188.433575][ T44] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 188.433617][ T44] [ 188.433627][ T44] write to 0xffffffff88eb6cf0 of 13 bytes by task 6822 on cpu 0: [ 188.433646][ T44] vsnprintf+0x2ce/0x860 [ 188.433672][ T44] vscnprintf+0x41/0x90 [ 188.433691][ T44] printk_sprint+0x30/0x2d0 [ 188.433719][ T44] vprintk_store+0x599/0x860 [ 188.433745][ T44] vprintk_emit+0x15a/0x610 [ 188.433772][ T44] vprintk_default+0x26/0x30 [ 188.433801][ T44] vprintk+0x1d/0x30 [ 188.433821][ T44] _printk+0x79/0xa0 [ 188.433835][ T44] bt_err+0x9d/0xd0 [ 188.433863][ T44] hci_cmd_timeout+0x97/0x140 [ 188.433882][ T44] process_scheduled_works+0x4ce/0x9d0 [ 188.433904][ T44] worker_thread+0x582/0x770 [ 188.433926][ T44] kthread+0x489/0x510 [ 188.433952][ T44] ret_from_fork+0x149/0x290 [ 188.433976][ T44] ret_from_fork_asm+0x1a/0x30 [ 188.433999][ T44] [ 188.434005][ T44] read to 0xffffffff88eb6cf8 of 8 bytes by task 44 on cpu 1: [ 188.434019][ T44] data_push_tail+0x100/0x470 [ 188.434045][ T44] data_alloc+0x11b/0x390 [ 188.434068][ T44] prb_reserve+0x964/0xb60 [ 188.434092][ T44] vprintk_store+0x56d/0x860 [ 188.434119][ T44] vprintk_emit+0x15a/0x610 [ 188.434145][ T44] vprintk_default+0x26/0x30 [ 188.434173][ T44] vprintk+0x1d/0x30 [ 188.434192][ T44] _printk+0x79/0xa0 [ 188.434205][ T44] bt_err+0x9d/0xd0 [ 188.434232][ T44] hci_dev_open_sync+0xfa4/0x2290 [ 188.434252][ T44] hci_power_on+0xef/0x390 [ 188.434268][ T44] process_scheduled_works+0x4ce/0x9d0 [ 188.434290][ T44] worker_thread+0x582/0x770 [ 188.434317][ T44] kthread+0x489/0x510 [ 188.434342][ T44] ret_from_fork+0x149/0x290 [ 188.434365][ T44] ret_from_fork_asm+0x1a/0x30 [ 188.434387][ T44] [ 188.434392][ T44] value changed: 0x00000000ffffe61e -> 0x3a30696368203a68 [ 188.434403][ T44] [ 188.434408][ T44] Reported by Kernel Concurrency Sanitizer on: [ 188.434421][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.434448][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.434465][ T44] Workqueue: hci0 hci_power_on [ 188.434494][ T44] ==================================================================