last executing test programs: 3m22.208636312s ago: executing program 0 (id=1110): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6b22, &(0x7f0000000040)={0x0, 0xe009, 0xc000, 0xc, 0xd4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m22.135357553s ago: executing program 0 (id=1113): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 3m20.617882532s ago: executing program 0 (id=1130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x804) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x6}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) 3m19.744068338s ago: executing program 0 (id=1157): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081c, &(0x7f00000005c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x1, 0x502, &(0x7f0000002a00)="$eJzs3c9vVFsdAPDvTDvttJTXvudbqNH38D0UDWHaDtAQFoorYwyJkaUmUNuhaTrtNJ0WaWVR1m5NJHGlS/8A16zcuzG6c4MLE380GmrCYsy9cweGMkMbWmaazueT3Nxz7rnM93uAew5zyswJYGBdiIjdiBiJiHsRMZldz2VH3GoeyX3P9x4t7O89WshFo3HnX7m0PbkWbb8mcS57zWJE/Oh7ET/NvRm3vr2zMl+tVjay+vRwVlhenV+qLFXWyuW52bmZG1evl0+sr5+ujmSlrz774+63fp6kNZFdSfvxotFonFi0pmbXCy/jJJKu/uCE4/TLUNafkX4nwjvJR8RHEfFZ+vxPxlAM9zslAOA9azQmozHZXgcAzrp8ugaWy5eytYCJyOdLpeYa3scxnq/W6puX79e21haba2VTUcjfX65WZrK1wqko5JL6bFp+VS8fqF+NiA8j4pejY2m9tFCrLvbzHz4AMMDOHZj//zvanP8BgDOu2O8EAICeM/8DwOAx/wPA4DH/A8Dgac7/Y/1OAwDoIe//AWDwmP8BYKD88Pbt5GjsZ9/jvfhge2ul9uDKYqW+UlrdWigt1DbWS0u12lL6nT2rh71etVZbn70WWw+nvr1e35yub+/cXa1trW3eTb/X+26lkN6124OeAQDdfPjp07/kkhn55lh6RNteDoW+Zga8b/l+JwD0zVC/EwD6xm5fMLiO8R7f8gCcER226H1NsdMHhBonv18u0DuXvmT9HwZV2/q//wUMA8b6Pwwu6/8wuBqN3FH3/I+j3ggAnG7W+IEuP///KDv/LvvhwE8WD97x5H1mBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKdba//fUrYX+ETk86VSxPmImIpC7v5ytTITER9ExJ9HC6NJfbbPOQMAx5X/ey7b/+vS5MWJ15o+OfeyOBIRP/v1nV89nN/c3PhTxEju36Ot65tPsuvl3mcPAByuNU+n57Y38s/3Hi20jl7m84/vRkSxGX9/byT2X8YfjuH0XIxCRIz/J5fVm3JtaxfHsfs4Ir7Yqf+5mEjXQJo7nx6Mn8Q+39P4+dfi59O25jn5vfjCCeQCg+ZpMv7c6vT85eNCeu78/BfTEer4svEveamF/XQMfBW/Nf4NdRn/Lhw1xrU/fL9ZGnuz7XHEl4cjWrH328afVvxcl/gXjxj/r1/55LNubY3fRFyKzvHbY01vrq5P17d3riyvzi9Vlipr5fLc7NzMjavXy9PpGvV099ngnzcvf9CtLen/eJf4xUP6//Uj9v+3L+79+Gtvif/NzzvFz8fHb4mfzInfOGL8+fHfF7u1JfEXu/T/sD//y0eM/+xvO29sGw4A9E99e2dlvlqtbNS3z7cKOwoKp7OQ/JU9BWl0LHzn5F4w3nrPSHRu+sXnzWf6QFOj8U5pdBsxTmLVDTgNXg05Ef/rdzIAAAAAAAAAAAAAAEBHvfh0VL/7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNn1/wAAAP//6KbPLA==") syz_open_procfs(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 3m19.625365628s ago: executing program 0 (id=1162): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0xf88b8d44cfa573f5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 3m19.247126211s ago: executing program 0 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "ce8874836f333a1a", "0b3ea924c47b25d7624cd362581725c7", "00040020", "d581d50399459b68"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) 3m19.246782671s ago: executing program 32 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "ce8874836f333a1a", "0b3ea924c47b25d7624cd362581725c7", "00040020", "d581d50399459b68"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.218853397s ago: executing program 1 (id=2974): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000700)=""/43, 0x2b, 0x0, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x1, 0x591, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x54}}, 0x404c004) 1m3.185175737s ago: executing program 1 (id=2975): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$vsock(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2030600) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x8, r1}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x600, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 1m3.049787388s ago: executing program 1 (id=2977): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee00) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x3b, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) 1m2.6933659s ago: executing program 1 (id=2981): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000280)={0xad2f, 0x5, 0x5, 0x8b, 0x7, "7f4ec452f80d501f"}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = dup3(r2, r2, 0x80000) socket$packet(0x11, 0x2, 0x300) write$UHID_INPUT(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m2.299383882s ago: executing program 1 (id=2985): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) syz_emit_ethernet(0x11, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97"}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1m2.267177593s ago: executing program 1 (id=2987): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) eventfd2(0x76, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004b3a5000000040045f7023cb95154c410000000000000002000000000000000"], 0x24, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000140)={[{@name={'name', 0x3d, '-'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f0000000ac0)=""/4113, 0x1011}], 0x1, 0x0, 0x0, 0x6) 1m2.251845382s ago: executing program 33 (id=2987): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) eventfd2(0x76, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004b3a5000000040045f7023cb95154c410000000000000002000000000000000"], 0x24, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000140)={[{@name={'name', 0x3d, '-'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f0000000ac0)=""/4113, 0x1011}], 0x1, 0x0, 0x0, 0x6) 5.267687077s ago: executing program 4 (id=3490): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000d06010400000000f136fee6000000000100000500000000000d0003006c6973743a736500"/56], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x80) r1 = socket(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xf, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r6}, 0x38) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.099470498s ago: executing program 6 (id=3494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000c80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 4.80047422s ago: executing program 5 (id=3496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = socket(0xa, 0x3, 0x87) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00\x00', 0x2}, {0x0}], 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffc000/0x1000)=nil, 0x4) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xeffffffffffff6ee, 0x7}, 0x100410, 0x1fc, 0x2, 0x1, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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") r8 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) preadv2(r8, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x7}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf26, {0x1, 0x31}, {}, @addr={0x2a, 0x6}}], 0x38) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4.7528578s ago: executing program 4 (id=3497): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRESOCT=r4, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_clone(0x4000, &(0x7f00000001c0)="01d547bd7a8b9b8ad1b89663d83c99d884d5db698c6cd1006600996293e636afeeee6254a0976ffdd3320c07d4b045b17059a96442f00a7707b9478ea3218baf9957338df428dea1d3208267feddf1c01626a91b9f19e06170093c2b7548", 0x5e, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000340)="fd55e8d0f8edda7108327936ae73f638527c6bea164d9eb085d7be4ba449b97bdfac7db424a3fb1f1d1a1eea46e8b8162b8fd9ccf8777cd4eab4e34a8bb0a1f65c") close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.70059407s ago: executing program 5 (id=3498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[], 0x0) 4.564641941s ago: executing program 2 (id=3499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1, 0x0, 0x2, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) epoll_create1(0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000100), 0x8) r7 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ptrace(0x10, r7) r9 = syz_open_procfs(r7, &(0x7f0000000040)='status\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 4.474582642s ago: executing program 2 (id=3500): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r2, 0x8, r4) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0x0, 0x28, 0x400, 0x70bd25, 0x25d7dbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xe}, {0x9, 0x10}}, [@tclass_kind_options=@c_prio, @TCA_RATE={0x0, 0x5, {0x9, 0x16}}, @TCA_RATE={0x0, 0x5, {0xa3, 0x9}}, @TCA_RATE={0x0, 0x5, {0x7, 0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a00)={{0x107, 0xc1, 0x4, 0x102, 0x25b, 0x1, 0x42, 0x2}, "106b64ef143a645d7ff3be5a34049cad9daef81fd04ccbcc5affebb55ec7ce77025c47087e1e96a12344481ec9f93495e8cfd77e51ed82be9376", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x75a) close(0xffffffffffffffff) 4.172736314s ago: executing program 6 (id=3503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 3.380736549s ago: executing program 4 (id=3504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000003}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104280100"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008d4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendfile(r5, r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r9, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008045}, 0x0) 3.300728029s ago: executing program 6 (id=3506): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0x50) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000000) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000005c0)={0x5, "a3d66fdf5371bb920ed338940ec59614efcf63cb46225a35e6fb84c29379146a07c8ffff7459246404ef1ca5bbb9ddbad681a09fcb2eb7fc017562c923866ef5fc73d9770b1a07404f4e4b9ca5e8b00442dc65b0b9219de228f5590affafa7337271b1f6976ac90d564223f62dbc158cf80321744616d5bec59db076c34ba91db1ca5778d55dd4db1694a5aa3729c651eb91454caaaf6270609b818df95d2f4cea39895be1940cef652dcea83fc6bd105023aa3d12d6c671cdad0838b03d4067b1a38f5214a96933f5798dcd1ea0503e1dd6553ed901e7d299ffb477842da490cadb815a57bb941bf73cbb90b33b41e6b8c89f70d26a4a179010faee18421ee1cb4f90924d47e811ba1d4579a16d687facd6bee9c27c5035e3b460a19bf681cd7859a2195b18a5ae147be291922f8b268962d1a327592baedb7d483df40b6236f3396af11a3f6b316d9a83a50136f84bce6d1f7fabeb9770ba91b7f48ec24a0915b6d237813e48ed5de0ed8a94d37b3b6ecd5e555cbb02d6cc8d4c8e14bd0090c7d67e85f720478d8ab218df93351c171fb8229af8306a37ac5468caa921b1c8e80d5fb0124d33471e15ebd9d8aeeb04f70fc51ccbbca96b7694a42b7fa65f0c07b56aa82a553913bd84ec952847f13ae0e5b93e2813aeac92df4e67c7cc195df1b2486c5698456f229289529a143b7cc4893ddca74535067986d0aa334f2ff0"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500007f00000000000000000000000094721718be448850f9899d23900ed833bf625a4ded79715d8e94eea39cf4af84dbf833c56b207ddbcebdd9036eb1299bced7f7c174b02f264b49"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigtimedwait(&(0x7f0000000000)={[0x3ff]}, 0x0, 0x0, 0x8) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.273594519s ago: executing program 3 (id=3507): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.14070958s ago: executing program 4 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 2.172674116s ago: executing program 6 (id=3509): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0xffff, 0x4, 0x1ff, 0x1, 0xf, 0xa8, 0x1, [0x2, 0x2]}}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200c021, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7f66646e6f3d7d0662abc5e74440bf61271e83f5979be4fb4b782d51ae0aa1af87be5c5a228a06195a95759cb5a15f3d1311faf00602a1019ab01317e7040b84efb5f9ab0e867bb00ecb3c88b9e90e0000", @ANYBLOB=',version=9p2000,\x00']) setxattr$incfs_size(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x3) 1.974261627s ago: executing program 3 (id=3510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b80), 0x82080, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x69}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.845395988s ago: executing program 4 (id=3511): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x13, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlock(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) accept$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) 1.831106828s ago: executing program 3 (id=3512): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x400, 0x70bd26, 0x0, {0x7a}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x20}}}}]}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) 1.767456959s ago: executing program 3 (id=3513): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000183000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 1.746115259s ago: executing program 4 (id=3514): socket$kcm(0x10, 0x2, 0x4) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 1.636728479s ago: executing program 5 (id=3515): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.374998631s ago: executing program 2 (id=3516): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe11) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200ac14141e0c00"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1.178615612s ago: executing program 6 (id=3517): socket$kcm(0x10, 0x2, 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0x8, 0xc7be, 0x10000002, 0xffffffff, 0xfffffffe}) socket$inet6(0xa, 0x1, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = add_key$user(&(0x7f0000000400), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000140)={'vlan0\x00', 0x8}) 1.056773033s ago: executing program 2 (id=3518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x69}, 0x0, 0x0) 931.319024ms ago: executing program 6 (id=3519): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c000000"], 0xe8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 930.035074ms ago: executing program 3 (id=3520): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x48, 0x20005, 0xb, 0x0, 0xe825, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES16=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 925.034374ms ago: executing program 2 (id=3521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020600) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09f8cd0000000055090100000000009500000000000000182a0000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x7d, &(0x7f0000000bc0)=""/125, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x3, 0x3, 0x7, 0x9}, {0x3, 0x4, 0x5, 0x6}, {0x4, 0x2, 0xa}, {0x4, 0x5, 0xd, 0x2}, {0x0, 0x5, 0xb, 0x3}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x0, 0x8}, {0x4, 0x2, 0x1, 0x8}], 0x10, 0xfffffff6}, 0x94) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) pwritev(r1, &(0x7f0000000180)=[{0x0}], 0x1, 0xee, 0x4000004) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000400)="d744f7d14b4cde91"}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) 732.701115ms ago: executing program 5 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b80), 0x82080, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x69}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 621.516306ms ago: executing program 5 (id=3523): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x400, 0x70bd26, 0x0, {0x7a}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x20}}}}]}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) 574.090656ms ago: executing program 5 (id=3524): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1010000, &(0x7f00000005c0)={[{@utf8}, {@rodir}, {@rodir}, {@shortname_winnt}, {@numtail}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}]}, 0x1, 0x36b, &(0x7f0000000140)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x300000000000000, 0x8005}, 0x20040040) r5 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r5, 0x0, 0x0) 688.07µs ago: executing program 2 (id=3525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103eebd70000000000001"], 0x28}}, 0x44) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200)={0x8}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000140)={{0x3, 0x1, 0x5, 0x2, 0x9}}) ioctl$TCSETSW2(r4, 0x5453, 0x0) 0s ago: executing program 3 (id=3526): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) syz_io_uring_setup(0x5c6, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800e3ff0100000000000000000000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x40000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x5}, 0x18) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x24000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) kernel console output (not intermixed with test programs): 3e syscall=321 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.226151][ T29] audit: type=1326 audit(1762458889.047:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.249694][ T29] audit: type=1326 audit(1762458889.047:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.273217][ T29] audit: type=1326 audit(1762458889.047:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.277354][ T6601] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 61 sec [ 176.296714][ T29] audit: type=1326 audit(1762458889.047:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.328901][ T29] audit: type=1326 audit(1762458889.047:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.352848][ T29] audit: type=1326 audit(1762458889.057:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.376360][ T29] audit: type=1326 audit(1762458889.057:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 176.634542][T10382] tipc: New replicast peer: 255.255.255.255 [ 176.640816][T10382] tipc: Enabled bearer , priority 10 [ 176.892924][T10381] vcan0 speed is unknown, defaulting to 1000 [ 177.040595][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 177.707005][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2456'. [ 177.725389][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2456'. [ 177.764040][ T8497] tipc: Node number set to 4068982606 [ 177.989882][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 178.004500][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 178.065344][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 178.166638][ T3599] smc: removing ib device syz1 [ 178.439901][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 179.372992][T10443] loop3: detected capacity change from 0 to 1764 [ 179.747843][T10461] loop3: detected capacity change from 0 to 512 [ 179.803378][T10461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.825618][T10461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 179.843926][T10461] System zones: 1-2, 4-12, 8-8 [ 179.893037][T10461] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2477: iget: bad i_size value: 38620345925642 [ 179.906349][T10461] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2477: couldn't read orphan inode 15 (err -117) [ 179.924721][T10461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.935072][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.949020][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.992891][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.005424][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 181.014534][T10506] hsr_slave_0: left promiscuous mode [ 181.020496][T10506] hsr_slave_1: left promiscuous mode [ 181.348931][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2493'. [ 181.370605][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 181.370624][ T29] audit: type=1400 audit(1762458894.327:6765): avc: denied { firmware_load } for pid=10518 comm="syz.5.2493" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 181.509664][ T29] audit: type=1400 audit(1762458894.467:6766): avc: denied { write } for pid=10521 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.545177][ T29] audit: type=1400 audit(1762458894.497:6767): avc: denied { mounton } for pid=10523 comm="syz.5.2495" path="/file0" dev="rootfs" ino=30273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 181.574500][ T29] audit: type=1400 audit(1762458894.537:6768): avc: denied { associate } for pid=10527 comm="syz.5.2495" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 182.821096][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2506'. [ 182.830157][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2506'. [ 183.153364][T10561] syzkaller0: entered promiscuous mode [ 183.158997][T10561] syzkaller0: entered allmulticast mode [ 183.380405][T10565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.404751][T10570] syzkaller0: entered promiscuous mode [ 183.410385][T10570] syzkaller0: entered allmulticast mode [ 183.592444][ T29] audit: type=1326 audit(1762458896.547:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.616046][ T29] audit: type=1326 audit(1762458896.547:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.639611][ T29] audit: type=1326 audit(1762458896.547:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.642769][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 183.663300][ T29] audit: type=1326 audit(1762458896.547:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.695660][ T29] audit: type=1326 audit(1762458896.547:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.719228][ T29] audit: type=1326 audit(1762458896.547:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10574 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cb0fdf6c9 code=0x7ffc0000 [ 183.765837][T10581] loop1: detected capacity change from 0 to 1024 [ 183.785237][T10581] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.797885][T10582] tipc: Enabling of bearer rejected, failed to enable media [ 183.834522][T10581] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2517: bad orphan inode 11 [ 183.844866][T10581] ext4_test_bit(bit=10, block=4) = 1 [ 183.850199][T10581] is_bad_inode(inode)=0 [ 183.854567][T10581] NEXT_ORPHAN(inode)=3254779904 [ 183.859595][T10581] max_ino=32 [ 183.862819][T10581] i_nlink=0 [ 183.869392][T10581] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2517: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.910023][T10581] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2517: Failed to acquire dquot type 0 [ 183.993207][T10581] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2517: Invalid inode bitmap blk 0 in block_group 0 [ 184.006684][ T3612] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.043713][ T3612] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:48: Failed to release dquot type 0 [ 184.063323][T10604] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.094454][T10581] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 184.112486][T10581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.186064][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 184.277761][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.815714][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 184.869729][T10648] syzkaller0: entered promiscuous mode [ 184.875378][T10648] syzkaller0: entered allmulticast mode [ 185.191852][T10667] loop3: detected capacity change from 0 to 128 [ 185.209512][T10667] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.216196][T10673] syzkaller0: entered allmulticast mode [ 185.223095][T10667] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.267615][T10667] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 185.337162][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.373499][T10682] syzkaller0: entered promiscuous mode [ 185.379176][T10682] syzkaller0: entered allmulticast mode [ 185.709448][T10694] netlink: 'syz.3.2557': attribute type 39 has an invalid length. [ 186.042315][ T8479] IPVS: starting estimator thread 0... [ 186.074828][T10709] syzkaller0: entered promiscuous mode [ 186.080400][T10709] syzkaller0: entered allmulticast mode [ 186.144129][T10705] IPVS: using max 2064 ests per chain, 103200 per kthread [ 186.329770][T10712] wireguard0: entered promiscuous mode [ 186.335405][T10712] wireguard0: entered allmulticast mode [ 186.374518][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 186.374537][ T29] audit: type=1326 audit(1762458899.337:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ebbf96567 code=0x7ffc0000 [ 186.404245][ T29] audit: type=1326 audit(1762458899.337:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ebbf3b779 code=0x7ffc0000 [ 186.427726][ T29] audit: type=1326 audit(1762458899.337:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 186.451298][ T29] audit: type=1326 audit(1762458899.367:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ebbf96567 code=0x7ffc0000 [ 186.474852][ T29] audit: type=1326 audit(1762458899.367:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ebbf3b779 code=0x7ffc0000 [ 186.498296][ T29] audit: type=1326 audit(1762458899.367:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ebbf96567 code=0x7ffc0000 [ 186.521829][ T29] audit: type=1326 audit(1762458899.367:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ebbf3b779 code=0x7ffc0000 [ 186.545565][ T29] audit: type=1326 audit(1762458899.367:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 186.568951][ T29] audit: type=1326 audit(1762458899.367:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ebbf96567 code=0x7ffc0000 [ 186.592628][ T29] audit: type=1326 audit(1762458899.367:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ebbf3b779 code=0x7ffc0000 [ 186.677971][T10730] loop1: detected capacity change from 0 to 128 [ 186.694670][T10730] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.707821][T10730] ext4 filesystem being mounted at /492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.814828][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.893752][T10742] tipc: Enabling of bearer rejected, failed to enable media [ 186.920493][T10744] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 186.939683][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2575'. [ 186.953720][T10744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.962586][T10744] bond3: (slave batadv0): making interface the new active one [ 186.971804][T10744] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 187.017649][T10726] Set syz1 is full, maxelem 65536 reached [ 187.818743][T10762] ipip0: entered promiscuous mode [ 188.221425][T10773] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.271949][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 188.753626][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 188.775307][T10779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10779 comm=syz.3.2586 [ 189.069520][T10793] netlink: 'syz.3.2592': attribute type 4 has an invalid length. [ 189.116214][T10793] netlink: 'syz.3.2592': attribute type 4 has an invalid length. [ 189.270101][T10808] dummy0: entered allmulticast mode [ 189.288249][T10808] bond1: entered allmulticast mode [ 189.293620][T10808] bond2: entered allmulticast mode [ 189.299964][T10808] gretap2: entered allmulticast mode [ 189.305862][T10808] bridge2: entered allmulticast mode [ 189.314054][T10808] geneve2: entered allmulticast mode [ 189.319712][T10808] netdevsim netdevsim3 eth0: entered allmulticast mode [ 189.332132][T10808] netdevsim netdevsim3 eth1: entered allmulticast mode [ 189.339583][T10808] netdevsim netdevsim3 eth2: entered allmulticast mode [ 189.347707][T10808] netdevsim netdevsim3 eth3: entered allmulticast mode [ 189.355583][T10808] bridge3: entered allmulticast mode [ 189.361864][T10808] ip6_vti1: entered allmulticast mode [ 189.367748][T10808] ip6tnl1: entered allmulticast mode [ 189.373382][T10808] bond3: entered allmulticast mode [ 189.378568][T10808] batadv0: entered allmulticast mode [ 189.386421][T10808] bridge4: entered allmulticast mode [ 189.467285][T10818] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 189.512928][T10818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.531205][T10820] bond4: (slave veth3): Enslaving as an active interface with a down link [ 189.545634][T10818] vlan0: entered allmulticast mode [ 189.551640][T10818] bond4: (slave vlan0): Opening slave failed [ 189.656768][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 189.721732][T10826] netlink: 'syz.2.2601': attribute type 10 has an invalid length. [ 189.879144][T10836] netlink: 'syz.2.2605': attribute type 4 has an invalid length. [ 189.888139][T10836] netlink: 'syz.2.2605': attribute type 4 has an invalid length. [ 190.172020][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 190.204213][T10851] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2612'. [ 190.234759][T10855] syzkaller0: entered promiscuous mode [ 190.240378][T10855] syzkaller0: entered allmulticast mode [ 190.255507][T10851] 0ªX¹¦D: renamed from gretap0 [ 190.265613][T10851] 0ªX¹¦D: entered allmulticast mode [ 190.271567][T10851] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 190.452381][T10866] loop1: detected capacity change from 0 to 128 [ 190.465596][T10866] FAT-fs (loop1): Directory bread(block 414) failed [ 190.478286][T10866] FAT-fs (loop1): Directory bread(block 415) failed [ 190.485213][T10866] FAT-fs (loop1): Directory bread(block 416) failed [ 190.491922][T10866] FAT-fs (loop1): Directory bread(block 417) failed [ 190.498817][T10866] FAT-fs (loop1): Directory bread(block 418) failed [ 190.512385][T10866] FAT-fs (loop1): Directory bread(block 419) failed [ 190.522377][T10866] FAT-fs (loop1): Directory bread(block 420) failed [ 190.529168][T10866] FAT-fs (loop1): Directory bread(block 421) failed [ 190.547859][T10866] FAT-fs (loop1): FAT read failed (blocknr 128) [ 190.560531][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 191.491190][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 193.251085][ T3604] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 193.289557][T10927] loop1: detected capacity change from 0 to 2048 [ 193.335424][T10927] Alternate GPT is invalid, using primary GPT. [ 193.341727][T10927] loop1: p1 p2 p3 [ 193.345500][T10927] loop1: partition table partially beyond EOD, truncated [ 193.708996][T10937] veth1_to_bond: entered allmulticast mode [ 193.715460][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 193.726760][T10937] veth1_to_bond (unregistering): left allmulticast mode [ 194.815170][T10976] bond0: (slave dummy0): Releasing backup interface [ 194.845346][T10976] bridge_slave_0: left allmulticast mode [ 194.851145][T10976] bridge_slave_0: left promiscuous mode [ 194.856962][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.890270][T10976] bridge_slave_1: left allmulticast mode [ 194.892099][T10981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2650'. [ 194.896088][T10976] bridge_slave_1: left promiscuous mode [ 194.910756][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.940757][T10976] bond0: (slave 77ÿ): Releasing backup interface [ 194.952301][T10976] bond0: (slave bond_slave_1): Releasing backup interface [ 194.985385][T10976] team0: Port device team_slave_0 removed [ 195.008764][T10981] team0: Mode changed to "loadbalance" [ 195.211746][T10990] netlink: 'syz.1.2655': attribute type 4 has an invalid length. [ 195.264352][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 195.264372][ T29] audit: type=1400 audit(1762458908.217:7253): avc: denied { connect } for pid=10991 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.338554][T10995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'. [ 195.347650][T10995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'. [ 195.380678][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.389638][T10998] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.398730][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.407626][T10998] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.422704][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.442316][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 195.685443][T11012] Timeout policy `syz0' can only be used by L3 protocol number 34825 [ 196.121908][ T29] audit: type=1326 audit(1762458909.077:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.154469][ T29] audit: type=1326 audit(1762458909.107:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.178809][ T29] audit: type=1326 audit(1762458909.107:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.202357][ T29] audit: type=1326 audit(1762458909.107:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.226620][ T29] audit: type=1326 audit(1762458909.107:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.250197][ T29] audit: type=1326 audit(1762458909.107:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.274640][ T29] audit: type=1326 audit(1762458909.107:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.298224][ T29] audit: type=1326 audit(1762458909.107:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.322467][ T29] audit: type=1326 audit(1762458909.107:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 196.487621][T11022] bond0: (slave ªªªªªª): Releasing backup interface [ 196.516836][T11022] bond0: (slave bond_slave_0): Releasing backup interface [ 196.549027][T11022] bond0: (slave bond_slave_1): Releasing backup interface [ 196.565048][T11022] team0: Port device team_slave_0 removed [ 196.572314][T11022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.581056][T11022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.599342][T11030] netlink: 'syz.2.2668': attribute type 39 has an invalid length. [ 197.027420][T11037] unsupported nlmsg_type 40 [ 198.066464][T11060] bridge_slave_0: left allmulticast mode [ 198.072243][T11060] bridge_slave_0: left promiscuous mode [ 198.077995][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.087763][T11060] bridge_slave_1: left allmulticast mode [ 198.093534][T11060] bridge_slave_1: left promiscuous mode [ 198.099340][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.111189][T11060] team0: Port device team_slave_0 removed [ 198.118724][T11060] team0: Port device team_slave_1 removed [ 198.125374][T11060] bond1: (slave ip6gretap1): Releasing active interface [ 198.753207][T11083] __nla_validate_parse: 11 callbacks suppressed [ 198.753224][T11083] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2686'. [ 198.770765][T11083] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2686'. [ 198.839753][ T3604] Bluetooth: hci0: Frame reassembly failed (-84) [ 198.885064][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 198.895412][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'. [ 198.957342][T11093] pim6reg: entered allmulticast mode [ 198.963439][T11093] pim6reg: left allmulticast mode [ 199.671468][T11132] cgroup: No subsys list or none specified [ 199.871393][T11137] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 200.144512][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 200.153453][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2713'. [ 200.226366][T11150] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 200.234247][T11150] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 200.241980][T11150] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 200.249743][T11150] netlink: 'syz.3.2713': attribute type 2 has an invalid length. [ 200.274182][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 200.274198][ T29] audit: type=1326 audit(1762458913.237:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.365490][ T29] audit: type=1326 audit(1762458913.267:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.389127][ T29] audit: type=1326 audit(1762458913.267:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.412733][ T29] audit: type=1326 audit(1762458913.267:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.436404][ T29] audit: type=1326 audit(1762458913.267:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.459934][ T29] audit: type=1326 audit(1762458913.277:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.483479][ T29] audit: type=1326 audit(1762458913.277:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.507077][ T29] audit: type=1326 audit(1762458913.277:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.530692][ T29] audit: type=1326 audit(1762458913.277:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.554222][ T29] audit: type=1326 audit(1762458913.277:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 200.579866][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2715'. [ 200.594226][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 200.666648][T11159] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 200.814086][ T8478] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 200.894525][ T7547] Bluetooth: hci0: command 0x1003 tx timeout [ 200.905163][ T6178] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.322736][T11174] netlink: 'syz.4.2722': attribute type 4 has an invalid length. [ 202.366393][T11204] smc: adding net device bond0 with user defined pnetid SYZ2 [ 202.374091][T11204] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 202.385306][T11204] smc: removing net device bond0 with user defined pnetid SYZ2 [ 202.393135][T11204] bond0 (unregistering): Released all slaves [ 203.131611][T11231] tipc: Enabling of bearer rejected, failed to enable media [ 203.511700][T11248] tipc: Enabling of bearer rejected, failed to enable media [ 203.522587][T11247] tipc: Enabling of bearer rejected, failed to enable media [ 203.796398][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 204.067750][T11282] loop1: detected capacity change from 0 to 512 [ 204.077235][T11289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2762'. [ 204.141382][T11282] EXT4-fs (loop1): too many log groups per flexible block group [ 204.165804][T11282] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 204.173071][T11282] EXT4-fs (loop1): mount failed [ 204.743264][T11314] tipc: Enabling of bearer rejected, failed to enable media [ 204.985223][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 204.994291][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 205.096060][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 205.098232][T11331] netlink: 83992 bytes leftover after parsing attributes in process `+}[@'. [ 205.116123][T11331] netlink: zone id is out of range [ 205.121282][T11331] netlink: zone id is out of range [ 205.134111][T11331] netlink: zone id is out of range [ 205.150162][T11331] netlink: zone id is out of range [ 205.155555][T11331] netlink: zone id is out of range [ 205.161033][T11331] netlink: zone id is out of range [ 205.167198][T11331] netlink: zone id is out of range [ 205.172350][T11331] netlink: zone id is out of range [ 205.177542][T11331] netlink: zone id is out of range [ 205.182678][T11331] netlink: zone id is out of range [ 205.282233][T11333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2776'. [ 205.681815][T11354] IPVS: set_ctl: invalid protocol: 1 172.20.20.28:20002 [ 206.447953][T11367] loop1: detected capacity change from 0 to 128 [ 206.555648][T11367] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.563536][T11367] FAT-fs (loop1): Filesystem has been set read-only [ 206.681200][T11367] bio_check_eod: 212 callbacks suppressed [ 206.681222][T11367] syz.1.2785: attempt to access beyond end of device [ 206.681222][T11367] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 206.888834][T11367] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.896844][T11367] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.984095][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.991985][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.001276][T11367] syz.1.2785: attempt to access beyond end of device [ 207.001276][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.014679][T11367] syz.1.2785: attempt to access beyond end of device [ 207.014679][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.028102][T11367] syz.1.2785: attempt to access beyond end of device [ 207.028102][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.041403][T11367] syz.1.2785: attempt to access beyond end of device [ 207.041403][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.054775][T11367] syz.1.2785: attempt to access beyond end of device [ 207.054775][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.068410][T11367] syz.1.2785: attempt to access beyond end of device [ 207.068410][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.104949][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2790'. [ 207.114576][T11368] syz.1.2785: attempt to access beyond end of device [ 207.114576][T11368] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.153193][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.161112][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.171433][T11367] syz.1.2785: attempt to access beyond end of device [ 207.171433][T11367] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.185687][T11368] syz.1.2785: attempt to access beyond end of device [ 207.185687][T11368] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 207.216014][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.223905][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.345837][T11366] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.022758][T11404] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 208.085521][T11404] pimreg: entered allmulticast mode [ 208.237867][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'. [ 208.699510][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 208.699607][ T29] audit: type=1326 audit(1762458921.657:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.730142][ T29] audit: type=1326 audit(1762458921.657:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.753842][ T29] audit: type=1326 audit(1762458921.657:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.778089][ T29] audit: type=1326 audit(1762458921.657:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.802420][ T29] audit: type=1326 audit(1762458921.657:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.915999][ T29] audit: type=1326 audit(1762458921.867:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.939579][ T29] audit: type=1326 audit(1762458921.867:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.964282][ T29] audit: type=1326 audit(1762458921.867:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 208.987854][ T29] audit: type=1326 audit(1762458921.867:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 209.012115][ T29] audit: type=1326 audit(1762458921.867:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 209.208414][T11462] loop1: detected capacity change from 0 to 512 [ 209.494670][T11467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11467 comm=syz.5.2810 [ 209.516568][T11462] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2812: Failed to acquire dquot type 1 [ 209.571879][T11462] EXT4-fs (loop1): 1 truncate cleaned up [ 209.654735][T11462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.777171][T11462] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.881032][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2815'. [ 209.890068][T11478] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2815'. [ 209.899183][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2815'. [ 209.908809][T11478] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2815'. [ 209.917962][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2815'. [ 209.950281][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.016400][T11480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.148017][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2816'. [ 210.149825][T11496] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 210.182736][T11400] syz.3.2797 (11400) used greatest stack depth: 6072 bytes left [ 210.213152][T11503] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2818'. [ 210.242503][T11503] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2818'. [ 210.401674][T11516] netlink: 'syz.3.2828': attribute type 13 has an invalid length. [ 210.519920][T11520] netlink: 'syz.3.2829': attribute type 10 has an invalid length. [ 210.527838][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2829'. [ 210.554168][T11520] dummy0: entered promiscuous mode [ 210.559368][T11520] dummy0: left allmulticast mode [ 210.583636][T11520] bridge0: port 1(dummy0) entered blocking state [ 210.590234][T11520] bridge0: port 1(dummy0) entered disabled state [ 210.609653][T11520] dummy0: entered allmulticast mode [ 210.662599][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 211.167974][T11544] ÿÿÿÿÿÿ: renamed from vlan1 [ 212.343740][T11565] loop1: detected capacity change from 0 to 512 [ 212.494419][T11565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.507169][T11565] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.534506][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.918823][T11598] loop1: detected capacity change from 0 to 512 [ 212.960571][T11598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 213.032999][T11598] EXT4-fs (loop1): 1 truncate cleaned up [ 213.039148][T11598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.101719][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.297787][T11611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11611 comm=syz.5.2859 [ 213.537617][T11629] loop1: detected capacity change from 0 to 512 [ 213.568558][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.593299][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.903505][T11640] veth0_to_team: left promiscuous mode [ 214.055184][T11641] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 214.742678][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 214.742696][ T29] audit: type=1400 audit(1762458927.697:8199): avc: denied { accept } for pid=11657 comm="syz.2.2876" lport=60451 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.784365][ T29] audit: type=1400 audit(1762458927.727:8200): avc: denied { write } for pid=11657 comm="syz.2.2876" lport=60451 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.808098][ T29] audit: type=1400 audit(1762458927.727:8201): avc: denied { setopt } for pid=11657 comm="syz.2.2876" lport=60451 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.899541][T11663] tipc: Enabling of bearer rejected, already enabled [ 215.592072][T11674] __nla_validate_parse: 4 callbacks suppressed [ 215.592096][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 215.715182][T11675] loop1: detected capacity change from 0 to 256 [ 215.962622][T11675] FAT-fs (loop1): Directory bread(block 64) failed [ 215.981473][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2881'. [ 216.000925][T11675] FAT-fs (loop1): Directory bread(block 65) failed [ 216.009996][T11675] FAT-fs (loop1): Directory bread(block 66) failed [ 216.038724][T11675] FAT-fs (loop1): Directory bread(block 67) failed [ 216.059043][T11675] FAT-fs (loop1): Directory bread(block 68) failed [ 216.087824][T11680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.102254][T11675] FAT-fs (loop1): Directory bread(block 69) failed [ 216.124970][T11675] FAT-fs (loop1): Directory bread(block 70) failed [ 216.164222][T11675] FAT-fs (loop1): Directory bread(block 71) failed [ 216.187124][T11675] FAT-fs (loop1): Directory bread(block 72) failed [ 216.212610][ T29] audit: type=1326 audit(1762458929.167:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.236838][ T29] audit: type=1326 audit(1762458929.167:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.260525][ T29] audit: type=1326 audit(1762458929.167:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.284820][ T29] audit: type=1326 audit(1762458929.167:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.308527][T11675] FAT-fs (loop1): Directory bread(block 73) failed [ 216.369646][T11675] bio_check_eod: 3321 callbacks suppressed [ 216.369662][T11675] /dev/sg#: attempt to access beyond end of device [ 216.369662][T11675] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 216.431211][T11675] /dev/sg#: attempt to access beyond end of device [ 216.431211][T11675] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 216.612940][ T29] audit: type=1326 audit(1762458929.277:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.637198][ T29] audit: type=1326 audit(1762458929.277:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.660818][ T29] audit: type=1326 audit(1762458929.277:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 216.836836][T11702] netlink: 'syz.1.2889': attribute type 10 has an invalid length. [ 216.852349][T11702] can0: slcan on ptm0. [ 216.895066][T11702] can0 (unregistered): slcan off ptm0. [ 216.901138][T11702] Falling back ldisc for ptm0. [ 217.172803][T11720] blktrace: Concurrent blktraces are not allowed on loop2 [ 217.475383][T11726] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.267117][T11730] netlink: 'syz.5.2908': attribute type 1 has an invalid length. [ 218.402780][T11730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.440830][T11740] netlink: 'syz.5.2900': attribute type 1 has an invalid length. [ 218.458973][T11745] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2896'. [ 218.474634][T11740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.485280][T11745] 0ªX¹¦D: renamed from gretap0 [ 218.517424][T11745] net_ratelimit: 366 callbacks suppressed [ 218.517444][T11745] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 218.555474][T11740] bond2: (slave veth5): Enslaving as an active interface with a down link [ 218.593215][T11740] vlan0: entered allmulticast mode [ 218.598481][T11740] veth1: entered allmulticast mode [ 218.604940][T11740] bond2: (slave vlan0): Opening slave failed [ 220.011657][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 220.011672][ T29] audit: type=1326 audit(1762458932.967:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 220.062373][ T29] audit: type=1326 audit(1762458933.007:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 220.185361][T11773] bond2: (slave ip6gretap1): Releasing active interface [ 220.195510][T11773] netlink: 4788 bytes leftover after parsing attributes in process `syz.2.2910'. [ 220.205817][T11773] netlink: 4788 bytes leftover after parsing attributes in process `syz.2.2910'. [ 220.278064][ T29] audit: type=1326 audit(1762458933.237:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.302442][ T29] audit: type=1326 audit(1762458933.237:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.326792][ T29] audit: type=1326 audit(1762458933.237:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.350478][ T29] audit: type=1326 audit(1762458933.237:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.374027][ T29] audit: type=1326 audit(1762458933.237:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.597106][ T29] audit: type=1326 audit(1762458933.337:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.620767][ T29] audit: type=1326 audit(1762458933.337:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 220.643598][ T29] audit: type=1326 audit(1762458933.337:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebbf9f6c9 code=0x7ffc0000 [ 221.528164][T11791] netlink: 'syz.5.2915': attribute type 1 has an invalid length. [ 221.757951][T11791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.787982][T11792] macvlan0: entered promiscuous mode [ 221.815339][T11792] bond3: entered promiscuous mode [ 221.851588][T11792] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 221.875749][T11792] bond3: left promiscuous mode [ 222.832973][T11806] 9pnet_fd: Insufficient options for proto=fd [ 222.903841][T11811] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 223.107660][T11811] smc: adding net device bond0 with user defined pnetid SYZ2 [ 223.143117][T11811] bond0: entered promiscuous mode [ 223.148422][T11811] bond0: entered allmulticast mode [ 223.156519][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.166127][T11817] tipc: Enabled bearer , priority 0 [ 223.175976][T11817] syzkaller0: entered promiscuous mode [ 223.181505][T11817] syzkaller0: entered allmulticast mode [ 223.191315][T11817] tipc: Resetting bearer [ 223.234822][T11816] tipc: Resetting bearer [ 223.275044][T11816] tipc: Disabling bearer [ 223.391382][T11829] lo speed is unknown, defaulting to 1000 [ 223.398814][T11829] lo speed is unknown, defaulting to 1000 [ 223.405129][T11829] lo speed is unknown, defaulting to 1000 [ 223.411397][T11829] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 223.419811][T11829] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 223.437118][T11829] lo speed is unknown, defaulting to 1000 [ 223.462242][T11829] lo speed is unknown, defaulting to 1000 [ 223.490608][T11829] lo speed is unknown, defaulting to 1000 [ 223.505766][T11829] lo speed is unknown, defaulting to 1000 [ 223.520961][T11829] lo speed is unknown, defaulting to 1000 [ 223.634783][T11829] lo speed is unknown, defaulting to 1000 [ 224.260060][T11844] netlink: 83992 bytes leftover after parsing attributes in process `'. [ 224.288236][T11844] netlink: zone id is out of range [ 224.293486][T11844] netlink: zone id is out of range [ 224.301538][T11848] loop1: detected capacity change from 0 to 1024 [ 224.334975][T11844] netlink: zone id is out of range [ 224.340137][T11844] netlink: zone id is out of range [ 224.345352][T11844] netlink: zone id is out of range [ 224.350489][T11844] netlink: zone id is out of range [ 224.355662][T11844] netlink: zone id is out of range [ 224.360871][T11844] netlink: zone id is out of range [ 224.366098][T11844] netlink: zone id is out of range [ 224.371218][T11844] netlink: zone id is out of range [ 224.376785][T11848] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2934: Failed to acquire dquot type 0 [ 224.404393][T11848] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 224.444737][T11848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2934: corrupted inode contents [ 224.456962][T11848] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2934: mark_inode_dirty error [ 224.550696][T11848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2934: corrupted inode contents [ 224.592218][T11848] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2934: mark_inode_dirty error [ 224.652774][T11848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2934: corrupted inode contents [ 224.680705][T11848] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2934: mark_inode_dirty error [ 224.708851][T11848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2934: corrupted inode contents [ 224.735735][T11848] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 224.754965][T11848] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2934: corrupted inode contents [ 224.778525][T11848] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2934: mark_inode_dirty error [ 224.802574][T11848] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 224.820630][T11848] EXT4-fs (loop1): 1 truncate cleaned up [ 224.833415][T11848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.872610][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.916146][T11857] loop1: detected capacity change from 0 to 512 [ 224.922838][T11857] EXT4-fs: Ignoring removed i_version option [ 224.929001][T11857] EXT4-fs: Ignoring removed bh option [ 224.941375][T11859] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 224.954265][T11857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.979469][T11857] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.009827][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.050875][T11863] tipc: Enabling of bearer rejected, failed to enable media [ 225.097646][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 225.097663][ T29] audit: type=1326 audit(1762458938.057:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.155308][ T29] audit: type=1326 audit(1762458938.057:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.165351][T11870] loop1: detected capacity change from 0 to 164 [ 225.178974][ T29] audit: type=1326 audit(1762458938.057:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179014][ T29] audit: type=1326 audit(1762458938.057:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179049][ T29] audit: type=1326 audit(1762458938.057:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179093][ T29] audit: type=1326 audit(1762458938.057:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179192][ T29] audit: type=1326 audit(1762458938.057:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179227][ T29] audit: type=1326 audit(1762458938.057:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179289][ T29] audit: type=1326 audit(1762458938.057:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 225.179320][ T29] audit: type=1326 audit(1762458938.057:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 226.071073][T11892] syzkaller0: entered promiscuous mode [ 226.077388][T11892] syzkaller0: entered allmulticast mode [ 226.590096][T11899] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 226.756512][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'. [ 228.101132][T11934] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 228.113884][T11934] loop1: detected capacity change from 0 to 512 [ 228.128566][T11934] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.135656][T11934] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.154807][T11934] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2965: iget: bogus i_mode (2355) [ 228.179085][T11934] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2965: couldn't read orphan inode 15 (err -117) [ 228.191836][T11934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.215884][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.859657][T11978] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 228.885465][T11977] loop1: detected capacity change from 0 to 1024 [ 228.901389][T11980] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2982'. [ 228.905378][T11977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.920217][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 228.936244][T11977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.223448][T11988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.408554][T12001] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 229.426947][T12001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.443173][T12000] netlink: 'syz.4.2991': attribute type 13 has an invalid length. [ 229.443361][T12001] macvlan2: entered promiscuous mode [ 229.458009][T12001] bond3: entered promiscuous mode [ 229.463675][T12001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.474763][T12001] bond3: left promiscuous mode [ 229.582119][T12010] 9pnet_fd: Insufficient options for proto=fd [ 229.655373][T11995] lo speed is unknown, defaulting to 1000 [ 229.750942][T11995] chnl_net:caif_netlink_parms(): no params data found [ 229.780430][T12028] netlink: 'syz.2.2998': attribute type 30 has an invalid length. [ 229.817463][T11995] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.824799][T11995] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.832228][T11995] bridge_slave_0: entered allmulticast mode [ 229.838771][T11995] bridge_slave_0: entered promiscuous mode [ 229.845863][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.853013][T11995] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.884241][T11995] bridge_slave_1: entered allmulticast mode [ 229.891062][T11995] bridge_slave_1: entered promiscuous mode [ 229.910797][T11995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.921247][T11995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.941833][T11995] team0: Port device team_slave_0 added [ 229.948532][T11995] team0: Port device team_slave_1 added [ 229.966746][T11995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.973723][T11995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.999724][T11995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.011171][T11995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.018235][T11995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.044172][T11995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.070217][T11995] hsr_slave_0: entered promiscuous mode [ 230.076430][T11995] hsr_slave_1: entered promiscuous mode [ 230.148430][T11995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.158140][T11995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.167554][T11995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.176799][T11995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.194001][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.201135][T11995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.208569][T11995] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.215705][T11995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.246511][T11995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.258490][T11995] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.317259][T11995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.367850][ T29] kauditd_printk_skb: 761 callbacks suppressed [ 230.367869][ T29] audit: type=1326 audit(1762458943.327:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.397766][ T29] audit: type=1326 audit(1762458943.327:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.421343][ T29] audit: type=1326 audit(1762458943.327:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.444814][ T29] audit: type=1326 audit(1762458943.327:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.468351][ T29] audit: type=1326 audit(1762458943.327:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.675289][ T29] audit: type=1326 audit(1762458943.327:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08c53adf10 code=0x7ffc0000 [ 230.698951][ T29] audit: type=1326 audit(1762458943.327:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08c53adf10 code=0x7ffc0000 [ 230.714837][T11995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.722887][ T29] audit: type=1326 audit(1762458943.327:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.752779][ T29] audit: type=1326 audit(1762458943.327:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.776445][ T29] audit: type=1326 audit(1762458943.337:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08c53af6c9 code=0x7ffc0000 [ 230.929819][T11995] veth0_vlan: entered promiscuous mode [ 230.954444][T11995] veth1_vlan: entered promiscuous mode [ 230.970227][T11995] veth0_macvtap: entered promiscuous mode [ 230.978193][T11995] veth1_macvtap: entered promiscuous mode [ 230.989235][T11995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.000470][T11995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.013545][ T3617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.023913][ T3617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.033978][T12079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.043236][ T3617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.058845][ T3617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.107237][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2988'. [ 231.120907][T12082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12082 comm=syz.6.2988 [ 231.719498][T12088] net_ratelimit: 343 callbacks suppressed [ 231.719516][T12088] Set syz1 is full, maxelem 65536 reached [ 231.821804][T12099] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 232.112013][T12122] loop6: detected capacity change from 0 to 1024 [ 232.129318][T12122] EXT4-fs: inline encryption not supported [ 232.136315][T12122] EXT4-fs: Ignoring removed nobh option [ 232.142091][T12122] EXT4-fs: Ignoring removed bh option [ 232.421849][T12122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.479684][T12122] tipc: Can't bind to reserved service type 2 [ 232.597430][T12129] tipc: Enabling of bearer rejected, failed to enable media [ 232.616574][T11995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.670561][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3020'. [ 232.748376][T12138] netlink: 'syz.6.3031': attribute type 39 has an invalid length. [ 232.757273][T12138] veth1_macvtap: left promiscuous mode [ 232.839491][T12136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12136 comm=syz.5.3020 [ 233.758966][T12169] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3032'. [ 233.768112][T12169] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 234.103331][T12174] lo speed is unknown, defaulting to 1000 [ 234.851320][T12179] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3034'. [ 234.871989][T12180] lo: entered allmulticast mode [ 234.878630][T12180] tunl0: entered allmulticast mode [ 234.884774][T12180] gre0: entered allmulticast mode [ 234.891242][T12180] gretap0: entered allmulticast mode [ 234.905949][T12180] erspan0: entered allmulticast mode [ 234.921295][T12180] ip_vti0: entered allmulticast mode [ 234.948580][T12180] ip6_vti0: entered allmulticast mode [ 234.967396][T12180] sit0: entered allmulticast mode [ 234.985639][T12180] ip6tnl0: entered allmulticast mode [ 235.001695][T12180] ip6gre0: entered allmulticast mode [ 235.018217][T12180] syz_tun: entered allmulticast mode [ 235.024554][T12180] team0: entered allmulticast mode [ 235.034292][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.052283][T12180] dummy0: entered allmulticast mode [ 235.065540][T12180] nlmon0: entered allmulticast mode [ 235.081930][T12180] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 235.097798][ T6601] lo speed is unknown, defaulting to 1000 [ 235.186420][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 235.202877][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 235.425933][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 235.425951][ T29] audit: type=1326 audit(1762458948.387:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.478226][ T29] audit: type=1326 audit(1762458948.427:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.501795][ T29] audit: type=1326 audit(1762458948.427:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.525423][ T29] audit: type=1326 audit(1762458948.427:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.549039][ T29] audit: type=1326 audit(1762458948.427:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.572634][ T29] audit: type=1326 audit(1762458948.427:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.596235][ T29] audit: type=1326 audit(1762458948.427:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.619798][ T29] audit: type=1326 audit(1762458948.427:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.643382][ T29] audit: type=1326 audit(1762458948.427:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 235.666967][ T29] audit: type=1326 audit(1762458948.427:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.5.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 236.016708][T12208] lo speed is unknown, defaulting to 1000 [ 237.228863][T12209] lo speed is unknown, defaulting to 1000 [ 238.057701][T12228] SELinux: failed to load policy [ 238.079713][T12228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.148140][T12228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.386996][T12228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.440223][T12228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.577028][T12239] lo speed is unknown, defaulting to 1000 [ 238.728839][T12239] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 238.740655][T12239] bond5 (unregistering): Released all slaves [ 239.001268][ T3587] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.023569][ T3587] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.050700][ T3587] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.080434][ T3587] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.314690][T12255] siw: device registration error -23 [ 239.849846][T12259] lo speed is unknown, defaulting to 1000 [ 240.262271][T12269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12269 comm=syz.3.3063 [ 240.481315][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 240.481332][ T29] audit: type=1326 audit(1762458953.437:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.575949][T12284] No such timeout policy "syz1" [ 240.595329][T12283] pim6reg: entered allmulticast mode [ 240.640933][ T29] audit: type=1326 audit(1762458953.467:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.665299][ T29] audit: type=1326 audit(1762458953.467:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.688858][ T29] audit: type=1326 audit(1762458953.467:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.713133][ T29] audit: type=1326 audit(1762458953.467:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.737712][ T29] audit: type=1326 audit(1762458953.467:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.761234][ T29] audit: type=1400 audit(1762458953.467:9724): avc: denied { read } for pid=12276 comm="syz.6.3065" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.786309][ T29] audit: type=1400 audit(1762458953.467:9725): avc: denied { open } for pid=12276 comm="syz.6.3065" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.811501][ T29] audit: type=1326 audit(1762458953.467:9726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 240.835178][ T29] audit: type=1326 audit(1762458953.467:9727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.6.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 241.684949][T12317] lo speed is unknown, defaulting to 1000 [ 242.248582][T12337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.256940][T12337] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 242.292878][T12340] unsupported nla_type 52263 [ 242.553399][T12353] capability: warning: `syz.4.3085' uses 32-bit capabilities (legacy support in use) [ 242.716576][T12363] bridge0: port 1(dummy0) entered blocking state [ 242.723104][T12363] bridge0: port 1(dummy0) entered forwarding state [ 242.744257][T12363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.792553][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 242.821068][T12367] macvtap1: entered allmulticast mode [ 242.826622][T12367] veth0_macvtap: entered allmulticast mode [ 242.938305][T12376] netlink: 'syz.3.3093': attribute type 21 has an invalid length. [ 242.949310][T12376] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3093'. [ 242.958455][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3093'. [ 242.974517][ T6178] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.082361][T12379] netlink: 'syz.4.3095': attribute type 10 has an invalid length. [ 243.306525][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 243.320039][T12387] ip6t_rpfilter: unknown options [ 243.557865][T12402] loop6: detected capacity change from 0 to 512 [ 243.565244][T12403] lo speed is unknown, defaulting to 1000 [ 243.619763][T12406] tipc: Enabling of bearer rejected, already enabled [ 243.631029][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3106'. [ 243.640730][T12406] tipc: Disabling bearer [ 243.750265][T12414] loop6: detected capacity change from 0 to 2048 [ 243.782976][T12414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.798738][T12414] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 243.814745][T12414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.827148][T12414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 243.827148][T12414] [ 243.836946][T12414] EXT4-fs (loop6): Total free blocks count 0 [ 243.842950][T12414] EXT4-fs (loop6): Free/Dirty block details [ 243.848988][T12414] EXT4-fs (loop6): free_blocks=2415919504 [ 243.855452][T12414] EXT4-fs (loop6): dirty_blocks=16 [ 243.860574][T12414] EXT4-fs (loop6): Block reservation details [ 243.866669][T12414] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 243.876294][T12420] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 243.892976][T12414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.906301][T12414] netlink: 'syz.6.3110': attribute type 1 has an invalid length. [ 244.300608][T12435] lo speed is unknown, defaulting to 1000 [ 244.342161][T12439] v: renamed from ip6_vti0 (while UP) [ 244.380765][T12436] lo speed is unknown, defaulting to 1000 [ 244.589766][T12455] lo speed is unknown, defaulting to 1000 [ 244.697961][T12466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3117'. [ 244.811732][T12473] netlink: 'syz.5.3118': attribute type 12 has an invalid length. [ 244.884108][T12479] tipc: New replicast peer: 255.255.255.32 [ 244.890327][T12479] tipc: Enabled bearer , priority 10 [ 244.932247][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 244.941388][T12479] tipc: Disabling bearer [ 245.150058][T12491] loop6: detected capacity change from 0 to 4096 [ 245.248262][T12491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.346407][T12491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.583520][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 245.583539][ T29] audit: type=1400 audit(1762458958.537:9984): avc: denied { mounton } for pid=12489 comm="syz.6.3122" path="/13/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.869018][ T29] audit: type=1400 audit(1762458958.827:9985): avc: denied { connect } for pid=12591 comm="syz.4.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.896345][T12592] netlink: 'syz.4.3128': attribute type 21 has an invalid length. [ 245.915525][T12592] netlink: 'syz.4.3128': attribute type 6 has an invalid length. [ 245.923343][T12592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3128'. [ 245.965730][T11995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.001373][T12600] netlink: 'syz.5.3141': attribute type 10 has an invalid length. [ 246.019765][T12598] ip6t_rpfilter: unknown options [ 246.096230][ T29] audit: type=1400 audit(1762458959.057:9986): avc: denied { setopt } for pid=12608 comm="syz.3.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.117842][T12609] netlink: 'syz.3.3133': attribute type 4 has an invalid length. [ 246.157130][ T29] audit: type=1400 audit(1762458959.117:9987): avc: denied { create } for pid=12615 comm="syz.3.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 246.196753][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3134'. [ 246.200791][ T29] audit: type=1326 audit(1762458959.157:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.4.3136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08c53af6c9 code=0x0 [ 246.227711][T12613] pim6reg: entered allmulticast mode [ 246.251436][T12613] pim6reg: left allmulticast mode [ 246.306531][T12624] netlink: 'syz.2.3138': attribute type 10 has an invalid length. [ 246.384284][ T29] audit: type=1326 audit(1762458959.347:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.5.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 246.409913][ T29] audit: type=1326 audit(1762458959.347:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.5.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 246.433497][ T29] audit: type=1326 audit(1762458959.347:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.5.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 246.457560][ T29] audit: type=1326 audit(1762458959.347:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.5.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 246.481109][ T29] audit: type=1326 audit(1762458959.347:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.5.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 246.543901][T12634] lo speed is unknown, defaulting to 1000 [ 246.709243][T12636] tipc: New replicast peer: 255.255.255.83 [ 246.715393][T12636] tipc: Enabled bearer , priority 10 [ 246.795615][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'. [ 247.431638][T12688] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 247.531230][T12696] ip6t_rpfilter: unknown options [ 248.071129][T12723] __nla_validate_parse: 19 callbacks suppressed [ 248.071144][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.086541][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.151766][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.204498][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.213505][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.246267][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.324967][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.334017][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.359279][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 248.398252][T12727] lo speed is unknown, defaulting to 1000 [ 248.420389][T12731] v: renamed from ip6_vti0 [ 248.490928][T12733] validate_nla: 1 callbacks suppressed [ 248.490944][T12733] netlink: 'syz.5.3172': attribute type 21 has an invalid length. [ 248.538532][T12730] lo speed is unknown, defaulting to 1000 [ 248.546197][T12733] netlink: 'syz.5.3172': attribute type 6 has an invalid length. [ 248.554026][T12733] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3172'. [ 248.561832][T12738] smc: net device bond0 erased user defined pnetid SYZ0 [ 249.441319][T12758] $Hÿ: renamed from bond0 (while UP) [ 249.477458][T12758] $Hÿ: entered promiscuous mode [ 249.482572][T12758] bond_slave_0: entered promiscuous mode [ 249.488387][T12758] bond_slave_1: entered promiscuous mode [ 249.784787][T12767] loop6: detected capacity change from 0 to 1024 [ 250.031014][T12767] EXT4-fs: Ignoring removed orlov option [ 250.036906][T12767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.076451][T12767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.128495][T12767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.278287][T12762] ALSA: seq fatal error: cannot create timer (-22) [ 250.299817][T12762] loop6: detected capacity change from 0 to 512 [ 250.317266][T12762] ext4: Unknown parameter '.' [ 250.606683][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 250.606701][ T29] audit: type=1326 audit(1762458963.537:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.637311][ T29] audit: type=1326 audit(1762458963.547:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.661009][ T29] audit: type=1326 audit(1762458963.547:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.685219][ T29] audit: type=1326 audit(1762458963.547:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.708869][ T29] audit: type=1326 audit(1762458963.547:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.733140][ T29] audit: type=1326 audit(1762458963.547:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.757381][ T29] audit: type=1326 audit(1762458963.547:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.780988][ T29] audit: type=1326 audit(1762458963.547:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.805247][ T29] audit: type=1326 audit(1762458963.547:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.828867][ T29] audit: type=1326 audit(1762458963.547:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 250.882967][T12789] netlink: 'syz.2.3184': attribute type 21 has an invalid length. [ 250.919749][T12789] netlink: 'syz.2.3184': attribute type 6 has an invalid length. [ 251.100819][T12813] loop6: detected capacity change from 0 to 128 [ 251.113277][T12813] syz.6.3197: attempt to access beyond end of device [ 251.113277][T12813] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 251.127761][T12813] syz.6.3197: attempt to access beyond end of device [ 251.127761][T12813] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 251.141330][T12813] buffer_io_error: 18 callbacks suppressed [ 251.141349][T12813] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 251.178571][T12813] syz.6.3197: attempt to access beyond end of device [ 251.178571][T12813] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 251.192119][T12813] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 252.289099][T12837] netlink: 'syz.4.3203': attribute type 1 has an invalid length. [ 252.554232][T12841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12841 comm=syz.3.3205 [ 253.303155][T12814] syz.6.3197: attempt to access beyond end of device [ 253.303155][T12814] loop6: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 253.316890][T12814] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 253.342829][T12814] syz.6.3197: attempt to access beyond end of device [ 253.342829][T12814] loop6: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 253.356538][T12814] Buffer I/O error on dev loop6, logical block 78, lost async page write [ 253.377031][T12814] syz.6.3197: attempt to access beyond end of device [ 253.377031][T12814] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 253.390782][T12814] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 253.401204][T12863] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 253.410817][T12814] syz.6.3197: attempt to access beyond end of device [ 253.410817][T12814] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 253.424980][T12814] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 253.504231][T12877] __nla_validate_parse: 22 callbacks suppressed [ 253.504248][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 254.360797][T12893] FAT-fs (loop9): unable to read boot sector [ 254.361659][T12892] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 254.381045][T12893] siw: device registration error -23 [ 254.545534][T12895] loop6: detected capacity change from 0 to 2048 [ 254.607234][T12900] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 254.615383][T12900] bridge0: port 1(dummy0) entered disabled state [ 254.621931][T12900] bridge0: left allmulticast mode [ 254.633373][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 254.651893][T12900] bridge0: port 1(dummy0) entered disabled state [ 254.786209][T12895] GPT:first_usable_lbas don't match. [ 254.791659][T12895] GPT:34 != 290 [ 254.795218][T12895] GPT: Use GNU Parted to correct GPT errors. [ 254.801340][T12895] loop6: p1 p2 p3 [ 255.860410][T12914] delete_channel: no stack [ 255.926249][T12924] veth2: entered promiscuous mode [ 255.931425][T12924] veth2: entered allmulticast mode [ 257.054886][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 257.054907][ T29] audit: type=1400 audit(1762458969.197:10790): avc: denied { mount } for pid=12921 comm="syz.5.3242" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 257.361777][ T29] audit: type=1400 audit(1762458970.317:10791): avc: denied { getopt } for pid=12945 comm="syz.2.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.393959][ T29] audit: type=1400 audit(1762458970.347:10792): avc: denied { bind } for pid=12948 comm="syz.3.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.415001][ T29] audit: type=1400 audit(1762458970.347:10793): avc: denied { connect } for pid=12948 comm="syz.3.3239" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.438215][T12946] lo speed is unknown, defaulting to 1000 [ 257.447384][T12946] lo speed is unknown, defaulting to 1000 [ 257.457630][T12951] netlink: 'syz.5.3237': attribute type 1 has an invalid length. [ 257.568179][T12951] bond4: entered promiscuous mode [ 257.573581][T12951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.589162][T12946] lo speed is unknown, defaulting to 1000 [ 257.604603][T12953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.611992][T12953] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 257.622061][T12953] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 257.635411][T12953] bond4: (slave gre1): making interface the new active one [ 257.642746][T12953] gre1: entered promiscuous mode [ 257.649868][T12953] bond4: (slave gre1): Enslaving as an active interface with an up link [ 258.022855][T12946] infiniband sz1: set active [ 258.027664][T12946] infiniband sz1: added lo [ 258.032372][ T8484] lo speed is unknown, defaulting to 1000 [ 258.126535][T12946] RDS/IB: sz1: added [ 258.134339][T12946] smc: adding ib device sz1 with port count 1 [ 258.140737][T12946] smc: ib device sz1 port 1 has no pnetid [ 258.147012][ T8478] lo speed is unknown, defaulting to 1000 [ 258.159920][T12946] lo speed is unknown, defaulting to 1000 [ 258.170135][ T29] audit: type=1326 audit(1762458971.117:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.198696][T12946] lo speed is unknown, defaulting to 1000 [ 258.239413][T12946] lo speed is unknown, defaulting to 1000 [ 258.271140][ T29] audit: type=1326 audit(1762458971.157:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.295639][ T29] audit: type=1326 audit(1762458971.157:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.304976][T12946] lo speed is unknown, defaulting to 1000 [ 258.319267][ T29] audit: type=1326 audit(1762458971.157:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.349798][ T29] audit: type=1326 audit(1762458971.157:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.374234][ T29] audit: type=1326 audit(1762458971.187:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 258.472815][T12946] lo speed is unknown, defaulting to 1000 [ 258.498651][T12965] lo speed is unknown, defaulting to 1000 [ 258.518786][T12946] lo speed is unknown, defaulting to 1000 [ 258.556746][T12965] lo speed is unknown, defaulting to 1000 [ 258.627044][T12946] lo speed is unknown, defaulting to 1000 [ 258.856895][T12984] veth4: entered promiscuous mode [ 258.862026][T12984] veth4: entered allmulticast mode [ 258.916586][T12990] syz_tun: entered allmulticast mode [ 258.933775][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3253'. [ 259.069535][T12990] syz_tun (unregistering): left allmulticast mode [ 259.177477][T13003] netlink: 'syz.2.3254': attribute type 4 has an invalid length. [ 259.186003][T13003] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3254'. [ 259.423775][T13007] loop6: detected capacity change from 0 to 2048 [ 259.535064][T13007] loop6: unable to read partition table [ 259.541145][T13007] loop6: partition table beyond EOD, truncated [ 259.548131][T13007] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 259.615991][T13007] loop5: detected capacity change from 0 to 7 [ 259.914257][T13008] Invalid logical block size (1) [ 260.135593][T13027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13027 comm=syz.4.3275 [ 260.285472][T13035] veth2: entered promiscuous mode [ 260.290649][T13035] veth2: entered allmulticast mode [ 260.484777][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3271'. [ 260.493787][T13045] tipc: Started in network mode [ 260.498745][T13045] tipc: Node identity 317a7907, cluster identity 4711 [ 260.505606][T13045] tipc: Node number set to 830109959 [ 260.699027][T13049] lo speed is unknown, defaulting to 1000 [ 260.706535][T13049] lo speed is unknown, defaulting to 1000 [ 261.568643][T13068] lo speed is unknown, defaulting to 1000 [ 261.576015][T13068] lo speed is unknown, defaulting to 1000 [ 262.389009][T13080] veth6: entered promiscuous mode [ 262.394168][T13080] veth6: entered allmulticast mode [ 262.613770][T13088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3284'. [ 262.702118][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 262.702145][ T29] audit: type=1326 audit(1762458975.657:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.758583][ T29] audit: type=1326 audit(1762458975.657:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.782388][ T29] audit: type=1326 audit(1762458975.657:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.806246][ T29] audit: type=1326 audit(1762458975.657:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.830079][ T29] audit: type=1326 audit(1762458975.657:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.853892][ T29] audit: type=1326 audit(1762458975.657:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.877710][ T29] audit: type=1326 audit(1762458975.657:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.901320][ T29] audit: type=1326 audit(1762458975.657:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.924936][ T29] audit: type=1326 audit(1762458975.657:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 262.948653][ T29] audit: type=1326 audit(1762458975.657:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 263.359342][T13107] lo speed is unknown, defaulting to 1000 [ 263.367251][T13107] lo speed is unknown, defaulting to 1000 [ 263.742433][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3294'. [ 263.774231][T13110] lo speed is unknown, defaulting to 1000 [ 263.780667][T13110] lo speed is unknown, defaulting to 1000 [ 263.960997][T13126] lo speed is unknown, defaulting to 1000 [ 264.009965][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 264.031944][T13126] lo speed is unknown, defaulting to 1000 [ 264.162268][T13143] netlink: 'syz.2.3301': attribute type 4 has an invalid length. [ 264.173650][ T8478] lo speed is unknown, defaulting to 1000 [ 264.179488][ T8478] sz1: Port: 1 Link DOWN [ 264.185762][T13143] netlink: 'syz.2.3301': attribute type 4 has an invalid length. [ 264.241747][ T8479] lo speed is unknown, defaulting to 1000 [ 264.247665][ T8479] sz1: Port: 1 Link ACTIVE [ 264.252381][ T8487] lo speed is unknown, defaulting to 1000 [ 264.331903][T13152] lo speed is unknown, defaulting to 1000 [ 264.339956][T13152] lo speed is unknown, defaulting to 1000 [ 264.346070][T13152] lo speed is unknown, defaulting to 1000 [ 264.445130][T13152] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 264.505788][T13152] lo speed is unknown, defaulting to 1000 [ 264.529717][T13152] lo speed is unknown, defaulting to 1000 [ 264.551034][T13157] netlink: 'syz.4.3305': attribute type 13 has an invalid length. [ 264.561035][T13152] lo speed is unknown, defaulting to 1000 [ 264.580635][T13152] lo speed is unknown, defaulting to 1000 [ 264.587348][T13157] veth0_macvtap: left allmulticast mode [ 264.600380][T13152] lo speed is unknown, defaulting to 1000 [ 264.611278][T13152] lo speed is unknown, defaulting to 1000 [ 264.634720][T13152] lo speed is unknown, defaulting to 1000 [ 264.668946][T13152] lo speed is unknown, defaulting to 1000 [ 264.811060][T13152] lo speed is unknown, defaulting to 1000 [ 265.283192][T13171] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 265.577667][T13165] lo speed is unknown, defaulting to 1000 [ 265.655842][T13165] lo speed is unknown, defaulting to 1000 [ 265.813150][T13180] lo speed is unknown, defaulting to 1000 [ 265.820407][T13165] lo speed is unknown, defaulting to 1000 [ 265.834962][T13180] lo speed is unknown, defaulting to 1000 [ 265.906153][T13180] lo speed is unknown, defaulting to 1000 [ 265.948969][T13205] netlink: 'syz.2.3318': attribute type 12 has an invalid length. [ 266.178971][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3320'. [ 266.531776][T13207] lo speed is unknown, defaulting to 1000 [ 266.579761][T13209] lo speed is unknown, defaulting to 1000 [ 266.587281][T13209] lo speed is unknown, defaulting to 1000 [ 266.653323][T13209] lo speed is unknown, defaulting to 1000 [ 267.001796][T13207] lo speed is unknown, defaulting to 1000 [ 267.054875][T13207] lo speed is unknown, defaulting to 1000 [ 267.403965][T13243] pimreg: entered allmulticast mode [ 267.653054][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3332'. [ 268.046262][T13275] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.087402][T13279] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 268.125828][T13283] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3342'. [ 268.147702][T13284] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 268.155776][T13279] dummy0: left promiscuous mode [ 268.160682][T13279] dummy0: left allmulticast mode [ 268.182055][T13283] netlink: zone id is out of range [ 268.187239][T13283] netlink: zone id is out of range [ 268.223384][T13283] netlink: zone id is out of range [ 268.241223][T13283] netlink: zone id is out of range [ 268.246616][T13283] netlink: zone id is out of range [ 268.251883][T13283] netlink: zone id is out of range [ 268.257052][T13283] netlink: zone id is out of range [ 268.262188][T13283] netlink: zone id is out of range [ 268.268063][T13283] netlink: zone id is out of range [ 268.273197][T13283] netlink: zone id is out of range [ 268.385580][T13292] bond2: (slave veth5): Releasing active interface [ 268.416387][T13292] bond4: (slave gre1): Releasing backup interface [ 268.427457][T13292] gre1: left promiscuous mode [ 268.563748][T13299] lo speed is unknown, defaulting to 1000 [ 268.570594][T13299] lo speed is unknown, defaulting to 1000 [ 268.608052][T13299] lo speed is unknown, defaulting to 1000 [ 268.846042][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 268.846121][ T29] audit: type=1326 audit(2000000006.090:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.876866][ T29] audit: type=1326 audit(2000000006.090:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.900496][ T29] audit: type=1326 audit(2000000006.090:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.925056][ T29] audit: type=1326 audit(2000000006.090:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.948689][ T29] audit: type=1326 audit(2000000006.090:11352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.973103][ T29] audit: type=1326 audit(2000000006.090:11353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 268.997408][ T29] audit: type=1326 audit(2000000006.090:11354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 269.021086][ T29] audit: type=1326 audit(2000000006.090:11355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 269.045510][ T29] audit: type=1326 audit(2000000006.090:11356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 269.069561][ T29] audit: type=1326 audit(2000000006.090:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.2.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 269.406463][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 269.415529][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 269.657753][T13335] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3358'. [ 269.868034][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3360'. [ 270.784656][T13370] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3367'. [ 270.804084][T13370] 0ªX¹¦À: renamed from caif0 [ 270.827624][T13371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13371 comm=syz.5.3371 [ 270.840305][T13371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13371 comm=syz.5.3371 [ 270.902772][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3371'. [ 270.945733][T13373] lo speed is unknown, defaulting to 1000 [ 270.972604][T13373] lo speed is unknown, defaulting to 1000 [ 271.077873][T13373] lo speed is unknown, defaulting to 1000 [ 271.395991][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3378'. [ 271.461539][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3381'. [ 272.096704][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3384'. [ 272.725970][T13434] dvmrp1: entered allmulticast mode [ 273.509764][T13445] lo speed is unknown, defaulting to 1000 [ 273.517465][T13445] lo speed is unknown, defaulting to 1000 [ 273.625918][T13445] lo speed is unknown, defaulting to 1000 [ 273.872250][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 273.872270][ T29] audit: type=1326 audit(2000000011.120:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.087523][ T29] audit: type=1326 audit(2000000011.160:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.111296][ T29] audit: type=1326 audit(2000000011.160:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.118722][T13449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=13449 comm=syz.2.3397 [ 274.135022][ T29] audit: type=1326 audit(2000000011.230:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.135073][ T29] audit: type=1326 audit(2000000011.230:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.135167][ T29] audit: type=1326 audit(2000000011.230:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.211149][ T29] audit: type=1326 audit(2000000011.340:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.244871][ T29] audit: type=1326 audit(2000000011.340:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.268628][ T29] audit: type=1326 audit(2000000011.340:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 274.293643][ T29] audit: type=1326 audit(2000000011.340:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38f6ef6c9 code=0x7ffc0000 [ 275.109175][T13460] lo speed is unknown, defaulting to 1000 [ 275.115722][T13460] lo speed is unknown, defaulting to 1000 [ 275.152348][T13460] lo speed is unknown, defaulting to 1000 [ 275.291843][T13464] pim6reg: entered allmulticast mode [ 275.321096][T13464] pim6reg: left allmulticast mode [ 275.577767][T13472] rdma_rxe: rxe_newlink: failed to add lo [ 275.988636][T13488] macsec0: entered promiscuous mode [ 275.994061][T13488] bridge0: entered promiscuous mode [ 276.171692][T13488] bridge0: port 1(macsec0) entered blocking state [ 276.178304][T13488] bridge0: port 1(macsec0) entered disabled state [ 276.185467][T13488] macsec0: entered allmulticast mode [ 276.190831][T13488] bridge0: entered allmulticast mode [ 276.197987][T13488] macsec0: left allmulticast mode [ 276.203120][T13488] bridge0: left allmulticast mode [ 276.811520][T13488] bridge0: left promiscuous mode [ 277.030627][T13493] lo speed is unknown, defaulting to 1000 [ 277.037122][T13493] lo speed is unknown, defaulting to 1000 [ 277.075255][T13493] lo speed is unknown, defaulting to 1000 [ 277.094120][T13504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13504 comm=syz.3.3413 [ 277.178848][T13507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3414'. [ 277.230075][T13509] netlink: 'syz.2.3416': attribute type 4 has an invalid length. [ 277.238627][T13509] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3416'. [ 277.360022][T13520] net_ratelimit: 30 callbacks suppressed [ 277.360041][T13520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.439827][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 277.495339][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3418'. [ 277.959572][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3424'. [ 278.014410][T13519] 9p: Unknown access argument 00000000000000000000 : -22 [ 279.004993][T13559] batadv_slave_1: entered promiscuous mode [ 279.054301][T13559] batadv_slave_1: left promiscuous mode [ 279.185552][T13567] tipc: Enabling of bearer rejected, failed to enable media [ 279.290359][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 279.290456][ T29] audit: type=1326 audit(2000000016.540:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.375783][ T29] audit: type=1326 audit(2000000016.630:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.399524][ T29] audit: type=1326 audit(2000000016.630:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.423135][ T29] audit: type=1326 audit(2000000016.630:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.446784][ T29] audit: type=1326 audit(2000000016.630:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.470323][ T29] audit: type=1326 audit(2000000016.630:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.494165][ T29] audit: type=1326 audit(2000000016.630:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.517887][ T29] audit: type=1326 audit(2000000016.630:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.541478][ T29] audit: type=1326 audit(2000000016.630:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.565149][ T29] audit: type=1326 audit(2000000016.630:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13577 comm="syz.5.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf820f6c9 code=0x7ffc0000 [ 279.612760][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3435'. [ 279.635445][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3435'. [ 279.755639][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3437'. [ 279.764674][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3437'. [ 279.957221][T13589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.580864][T13604] lo speed is unknown, defaulting to 1000 [ 280.589095][T13604] lo speed is unknown, defaulting to 1000 [ 280.692291][T13604] lo speed is unknown, defaulting to 1000 [ 281.617569][T13625] lo speed is unknown, defaulting to 1000 [ 281.624579][T13625] lo speed is unknown, defaulting to 1000 [ 281.689181][T13625] lo speed is unknown, defaulting to 1000 [ 282.004111][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3450'. [ 282.033557][T13628] netlink: 'syz.3.3450': attribute type 1 has an invalid length. [ 282.221747][T13632] lo speed is unknown, defaulting to 1000 [ 282.228324][T13632] lo speed is unknown, defaulting to 1000 [ 282.267132][T13632] lo speed is unknown, defaulting to 1000 [ 282.457355][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 282.553849][T13639] macsec0: entered allmulticast mode [ 282.559307][T13639] bridge0: entered allmulticast mode [ 282.601606][T13639] bridge0: port 1(macsec0) entered blocking state [ 282.608337][T13639] bridge0: port 1(macsec0) entered disabled state [ 282.675708][T13639] bridge0: left allmulticast mode [ 283.861317][T13679] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3465'. [ 283.881010][T13679] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3465'. [ 284.386372][ T29] kauditd_printk_skb: 814 callbacks suppressed [ 284.386391][ T29] audit: type=1326 audit(2000000021.630:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.416229][ T29] audit: type=1326 audit(2000000021.630:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.439831][ T29] audit: type=1326 audit(2000000021.630:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.463458][ T29] audit: type=1326 audit(2000000021.630:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.487077][ T29] audit: type=1326 audit(2000000021.630:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.510755][ T29] audit: type=1326 audit(2000000021.630:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.534699][ T29] audit: type=1326 audit(2000000021.720:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.558443][ T29] audit: type=1326 audit(2000000021.720:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.582041][ T29] audit: type=1326 audit(2000000021.740:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.605757][ T29] audit: type=1326 audit(2000000021.740:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.4.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08c53e1f85 code=0x7ffc0000 [ 284.630057][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 284.639517][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 284.648798][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 284.657936][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 284.860968][T13705] lo speed is unknown, defaulting to 1000 [ 285.156810][T13705] lo speed is unknown, defaulting to 1000 [ 285.244437][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3476'. [ 285.248140][T13705] lo speed is unknown, defaulting to 1000 [ 285.339537][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 285.485654][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 285.578095][T13743] lo speed is unknown, defaulting to 1000 [ 285.615079][T13743] lo speed is unknown, defaulting to 1000 [ 285.794207][T13743] lo speed is unknown, defaulting to 1000 [ 286.345298][T13765] xt_hashlimit: max too large, truncated to 1048576 [ 286.399894][T13763] geneve2: entered promiscuous mode [ 286.405217][T13763] geneve2: entered allmulticast mode [ 286.986013][T13791] dummy0: entered promiscuous mode [ 286.991692][T13791] debugfs: 'hsr0' already exists in 'hsr' [ 286.997566][T13791] Cannot create hsr debugfs directory [ 287.003743][T13791] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 287.032240][T13791] hsr0: entered promiscuous mode [ 287.037379][T13791] hsr0: entered allmulticast mode [ 288.590438][T13824] lo speed is unknown, defaulting to 1000 [ 288.598626][T13824] lo speed is unknown, defaulting to 1000 [ 288.667214][T13824] lo speed is unknown, defaulting to 1000 [ 289.583158][T13832] 9pnet_fd: Insufficient options for proto=fd [ 289.712035][T13837] netlink: 'syz.4.3511': attribute type 12 has an invalid length. [ 289.733469][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 289.733485][ T29] audit: type=1400 audit(2000000026.980:13439): avc: denied { accept } for pid=13836 comm="syz.4.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 290.226769][ T29] audit: type=1400 audit(2000000027.480:13440): avc: denied { write } for pid=13852 comm="syz.2.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.478970][T13856] : renamed from vlan0 (while UP) [ 290.492661][ T29] audit: type=1400 audit(2000000027.550:13441): avc: denied { write } for pid=13852 comm="syz.2.3516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 290.627996][T13863] __nla_validate_parse: 2 callbacks suppressed [ 290.628015][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3519'. [ 290.752904][ T29] audit: type=1326 audit(2000000027.970:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.777198][ T29] audit: type=1326 audit(2000000027.970:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.800788][ T29] audit: type=1326 audit(2000000027.980:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.825241][ T29] audit: type=1326 audit(2000000027.980:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.848847][ T29] audit: type=1326 audit(2000000027.980:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.873254][ T29] audit: type=1326 audit(2000000027.980:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.897601][ T29] audit: type=1326 audit(2000000027.980:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.6.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b34a2f6c9 code=0x7ffc0000 [ 290.953831][T13863] lo speed is unknown, defaulting to 1000 [ 290.965007][T13863] lo speed is unknown, defaulting to 1000 [ 291.021312][T13863] lo speed is unknown, defaulting to 1000 [ 291.180241][T13879] Invalid ELF header magic: != ELF [ 291.558677][T13882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3526'. [ 291.569270][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3525'. [ 291.595163][T13843] ================================================================== [ 291.603286][T13843] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 291.611116][T13843] [ 291.613437][T13843] write to 0xffffea0004d27258 of 8 bytes by task 13789 on cpu 0: [ 291.621148][T13843] __filemap_remove_folio+0x1a5/0x2a0 [ 291.626872][T13843] filemap_remove_folio+0x6d/0x1d0 [ 291.631987][T13843] truncate_inode_folio+0x42/0x50 [ 291.637012][T13843] shmem_undo_range+0x244/0xa80 [ 291.642219][T13843] shmem_evict_inode+0x134/0x520 [ 291.647158][T13843] evict+0x2e3/0x550 [ 291.651051][T13843] iput+0x4ed/0x650 [ 291.654865][T13843] dentry_unlink_inode+0x24f/0x260 [ 291.659970][T13843] __dentry_kill+0x18d/0x4b0 [ 291.664565][T13843] dput+0x5e/0xd0 [ 291.668206][T13843] __fput+0x444/0x650 [ 291.672185][T13843] ____fput+0x1c/0x30 [ 291.676161][T13843] task_work_run+0x131/0x1a0 [ 291.680778][T13843] do_exit+0x483/0x15c0 [ 291.684930][T13843] do_group_exit+0xff/0x140 [ 291.689427][T13843] get_signal+0xe58/0xf70 [ 291.693772][T13843] arch_do_signal_or_restart+0x96/0x440 [ 291.699316][T13843] irqentry_exit_to_user_mode+0x5b/0xa0 [ 291.704874][T13843] irqentry_exit+0x12/0x50 [ 291.709316][T13843] exc_general_protection+0x15b/0x1f0 [ 291.714687][T13843] asm_exc_general_protection+0x26/0x30 [ 291.720231][T13843] [ 291.722548][T13843] read to 0xffffea0004d27258 of 8 bytes by task 13843 on cpu 1: [ 291.730171][T13843] folio_mapping+0xa1/0xe0 [ 291.734593][T13843] evict_folios+0xe05/0x3590 [ 291.739188][T13843] try_to_shrink_lruvec+0x5b5/0x950 [ 291.744393][T13843] shrink_lruvec+0x22e/0x1b50 [ 291.749069][T13843] shrink_node+0x686/0x2120 [ 291.753575][T13843] do_try_to_free_pages+0x3f6/0xcd0 [ 291.758775][T13843] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 291.764670][T13843] try_charge_memcg+0x383/0xa10 [ 291.769522][T13843] obj_cgroup_charge_pages+0xa6/0x150 [ 291.774900][T13843] __memcg_kmem_charge_page+0x9f/0x170 [ 291.780354][T13843] __alloc_frozen_pages_noprof+0x188/0x360 [ 291.786164][T13843] alloc_pages_mpol+0xb3/0x260 [ 291.790925][T13843] alloc_pages_noprof+0x90/0x130 [ 291.795865][T13843] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 291.801682][T13843] __kvmalloc_node_noprof+0x483/0x670 [ 291.807066][T13843] ip_set_alloc+0x24/0x30 [ 291.811407][T13843] hash_netiface_create+0x282/0x740 [ 291.816612][T13843] ip_set_create+0x3cc/0x970 [ 291.821199][T13843] nfnetlink_rcv_msg+0x4c6/0x590 [ 291.826141][T13843] netlink_rcv_skb+0x123/0x220 [ 291.832476][T13843] nfnetlink_rcv+0x167/0x16c0 [ 291.837155][T13843] netlink_unicast+0x5c0/0x690 [ 291.841927][T13843] netlink_sendmsg+0x58b/0x6b0 [ 291.846683][T13843] __sock_sendmsg+0x145/0x180 [ 291.851362][T13843] ____sys_sendmsg+0x31e/0x4e0 [ 291.856122][T13843] ___sys_sendmsg+0x17b/0x1d0 [ 291.860796][T13843] __x64_sys_sendmsg+0xd4/0x160 [ 291.865653][T13843] x64_sys_call+0x191e/0x3000 [ 291.870330][T13843] do_syscall_64+0xd2/0x200 [ 291.874831][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.880721][T13843] [ 291.883059][T13843] value changed: 0xffff888104d88aa8 -> 0x0000000000000000 [ 291.890154][T13843] [ 291.892476][T13843] Reported by Kernel Concurrency Sanitizer on: [ 291.898634][T13843] CPU: 1 UID: 0 PID: 13843 Comm: syz.4.3514 Not tainted syzkaller #0 PREEMPT(voluntary) [ 291.908445][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.918500][T13843] ================================================================== [ 291.952261][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'.