last executing test programs: 5.693426997s ago: executing program 1 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="85000000ae00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd296303406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c126ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f8546290c1a325221f36f8d749d4a9aa1883a41d92228c93b60fe677f4f9d51fadbba6dd46222fd11f678d7e9a307024806cc28cba904f8d12870b4528b8d75fd29adacf0a52cdfaf4e43f00e532cfc15f394db7d521339aa980f81bd78a82d84dba575391bee41c95daf3b576feed54d448d36ad0000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780"], 0x64}}, 0x0) syz_emit_ethernet(0x38, &(0x7f00000007c0)={@multicast, @remote, @void, {@generic={0x16, "a54bb67cbea5ada6781cc8fbf90cfdc77e21ddbb8f163ab6f17f98c8de6334856f930a3782164efa6f7f"}}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) socket$isdn(0x22, 0x3, 0x25) close(0x3) 4.645818344s ago: executing program 1 (id=927): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendfile(r0, r1, &(0x7f0000000180)=0x66457e4a, 0x8) unshare(0x6a040000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b49, &(0x7f0000003140)=""/4111) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = getpgrp(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x2, r6}) sendto$inet6(r4, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x100, 0x10, 0x0, 0xf3}, &(0x7f0000000240)=0x18) syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x41) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000000bc0)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 4.406749168s ago: executing program 4 (id=931): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2a22404, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x4, 0xbc}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000000029bd7000ebdbdf25021420e706000000e8afeaf28e120b040000080002007f000001050051906b379f40e290210b41dc7ec5bfb5f21f7653d9a12f12ea62ecc4856ff03205162747ab752512bbdfbeb2278c648183fc969f98d5c919f96d77563248c6ffa709b02fdfc9"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) 2.240209383s ago: executing program 4 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="04", 0x1}], 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x24000894) close_range(r0, r6, 0x2) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r10}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r10}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}]}, 0x40}}, 0x0) 2.000475417s ago: executing program 3 (id=940): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r6, 0x0, 0x10000}, 0x18) io_uring_enter(r3, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) socket$unix(0x1, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r7], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.993404118s ago: executing program 4 (id=941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1018010, &(0x7f0000000100)=ANY=[], 0x1, 0x11b2, &(0x7f0000002440)="$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") open$dir(0x0, 0x8040, 0x1b8) modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='fsi_master_aspeed_opb_error\x00', 0xffffffffffffffff, 0x0, 0xc}, 0x18) io_setup(0x800, &(0x7f0000000440)=0x0) eventfd(0x0) io_submit(r3, 0x0, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) get_robust_list(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 1.83661548s ago: executing program 3 (id=943): r0 = io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x560f, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.617778164s ago: executing program 1 (id=944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, 0x0, 0x9) kexec_load(0x4, 0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.615845853s ago: executing program 4 (id=945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='kyber_adjust\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) eventfd2(0x8, 0x80001) epoll_create(0x1) socket$kcm(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 1.600180754s ago: executing program 0 (id=946): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x22) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, r8, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x3d) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) mlockall(0x3) 1.456136376s ago: executing program 4 (id=947): setresuid(0xee01, 0xee00, 0x0) setuid(0xee01) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r2}, 0x20) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r5) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r6, 0x0, 0x20) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) sendfile(r6, r6, &(0x7f0000000200)=0x77, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc179fd1f8a0a1af1ea89de2b7fb646e00000000000000000300", "2809e8db4820a100005240f45f819e00000000eaffffffffffffff133100348100", "90be8b0000000000000000000003000000000000000000002afedb9f00", [0x4, 0x20000a]}}) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)=']/\x00', 0xfffffffffffffff9) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x1000000000000, {}, 0x0, 0x3, 0x4002, 0x28, "561bfcadb322e7a648b826f003c1851a9c242527a1570c59503feafddf64cabfda4c147b3a45b8e943bced07fd3bffbf00", "2b416beab0043ee1ce02417940bd7c3771a80b0000000000403900", [0x3, 0x5]}) 1.304626019s ago: executing program 2 (id=948): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0b8a6f364f28f4dd34d5600de96a98db3874610cf5e010f61cf678f49f81eda20c9b1ecae21443cde0723824d525a1819d5061fdec2e1ed25e2cdce41ca923cf7586db7b85fb752e9a9cf72a0edd31922f8b836b29ea26b9263a79f47f87291339b8dca582cd0d7bf96f460820fbfcda7502ce9ceb261b9e21517731cb5ae2da234eaae4f351726703cc08b2b11f303087c9247c4e0988434e66305a0b6d5435fa5cd7b29c53b8f7b2442b1ecf23377cda80333e4b5cccb68e2d7ec22a688469c26459041c8e056a73bea55e874e23ae55e11f4268631dd1440b36daedaa4152156222fe91ec6dfa3babc72bde7c4aaecdfc4f48a8c6778554e09db0", @ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000e803010000000000000000000500000a140000002fab2024dadd20d7000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) fcntl$setsig(r8, 0xa, 0x12) dup2(r8, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000001e40)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@grpid}, {@i_version}, {@usrjquota}, {@jqfmt_vfsv0}, {@dax_never}, {@journal_checksum}, {@usrquota}, {@sb={'sb', 0x3d, 0x5}}], [{@fsmagic}]}, 0x81, 0x55a, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) 1.249641209s ago: executing program 2 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff0003dab7ffffae69690000204a0fa9050f9bd84f8b97d3d2050a7003c68d1396892ecc27d8280daf7acb240a4307c80387e949ec47a9c0e2ab8d824b51c11bc7f3073495c96ef7431564c42183c6d256e556111b001715913899c25306560af46473d8176a41e2ca3dd9fa2910989f3c10a0caa48234c769e58dc976c40afb3f278d5665f43cc5652c614f7e4ef8ac6e3b3740c87419e1801bc7020c6995deba5e9bbeddb8788e7325efacaea7b737b556a9ec253cda46e299f8dddc19a1ac7e19d148b61d0b90da", @ANYRES16=r8, @ANYBLOB="010000002000fedbdf251000000018000180140002006e657464657673696d3000000000000008000800010000000800090007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) syz_read_part_table(0x1063, &(0x7f0000002100)="$eJzsz7FtAkEQBdC/ujv7LrI7sMtw6MyBY1fgQq4fWiBApJRARh9Ii/ZOUAIQvBfMSjPztZrwUFNJ0vVfJalza7y/roM+0/J2Sx2yPfT7U/KRObUuO+O6uPsdxtS3bkxKjj9TC3y3wUsr5/p//aqsnc9yi+Zvc8dTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpXQIAAP//DFsO/A==") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x1, 0x5}, 0x6}, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.136160921s ago: executing program 2 (id=950): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000eeb000/0x4000)=nil, 0x3) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x800000009) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) 1.041762123s ago: executing program 3 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x587f, 0x2000, 0x0, 0x3d3}, &(0x7f0000000300)=0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x115) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 1.038908183s ago: executing program 0 (id=952): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r8 = fsmount(r7, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x6}, 0x18) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) r11 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4]) 973.112814ms ago: executing program 0 (id=953): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x3, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 972.143144ms ago: executing program 3 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) socket(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000ec0)=""/4096, 0x2a, 0x1000, 0x0, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xa, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000580)='syzkaller\x00', 0xffffff7f, 0xf8, &(0x7f00000005c0)=""/248, 0x0, 0x22, '\x00', r5, @fallback=0x37, r6, 0x8, &(0x7f0000000740)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xb, 0xffff, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000007c0)=[r0], &(0x7f0000000800)=[{0x0, 0x3, 0x7, 0x7}, {0x5, 0x1, 0x5}], 0x10, 0xff}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r11, 0x2275, &(0x7f0000000040)) r12 = dup3(r8, r7, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4$unix(r12, 0xfffffffffffffffe, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) 971.043384ms ago: executing program 3 (id=955): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x8, [{0xf, 0xca, 0xff}, {0x8, 0x4, 0x4}, {0x6, 0x9, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/2, 0x66, 0x2, 0x1, 0x5}, 0x28) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x4, 0x8001, {{0xd, 0x4, 0x3, 0x1f, 0x34, 0x66, 0x0, 0xc, 0x4, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0xde, 0x0, 0x5, [0x8, 0x8, 0x5, 0x7ff]}, @timestamp_prespec={0x44, 0xc, 0xfa, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}]}}}}}) syz_open_procfs(r7, &(0x7f0000000440)='fd/3\x00') sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) 915.928435ms ago: executing program 2 (id=956): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) fcntl$addseals(r2, 0x409, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7d, &(0x7f0000000480)=@assoc_value={0x0, 0xc}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r9, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, 0x0, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 914.724715ms ago: executing program 0 (id=957): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0xc, 0x1, 0x0, 0x13, 0x0, 0x5, [{0xd, 0x3, 0x4}]}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f00000004c0)=""/148, 0x41, 0x94, 0x1, 0x80000001}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) sendmmsg(r1, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="7f27cf1d", 0x4}], 0x1}}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) timer_settime(r0, 0x1, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000023f6ea7a9caf720aeed1287a6eb7d13251799eded1b3f9982b9a475a4399eea2d0386e6ac98f01bff683d0ca4419655b5475c6e86c461b2449f41623b838825f632c6d4e26730c71f11bbcae2cdf2d521d895"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) 852.532466ms ago: executing program 3 (id=958): r0 = io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x560f, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 750.064438ms ago: executing program 1 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = creat(0x0, 0x1) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x3) r7 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64, @ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r5, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0}, {}, {@stripe={'stripe', 0x3d, 0x1ff}}, {@resgid}, {@orlov}, {@grpjquota, 0x2e}, {@bh}, {@errors_remount}, {@nomblk_io_submit}, {@delalloc}], [{@fsname={'fsname', 0x3d, 'errors=remount-ro'}}, {@euid_eq={'euid', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, ':}$\\/(['}}, {@euid_lt={'euid<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '&\x02@@^/\xcd}&='}}, {@dont_measure}], 0x2c}, 0x1, 0x4c0, &(0x7f0000000ac0)="$eJzs3M1vG0UbAPBnN3H63aR9+74v/YAaCqKikDRpgR44FARSL0hIcCjHkIaqNG1REyRaVTQgVI6IvwA4IiFx4sIJJISAEx9XuCOkCvXSwgEFrb2bbBLHdRwnafHvJ9mZ2Z3NzLO74x3v2A6ga1WzpyRia0T8EhH99ez8AtX6n1s3roz9eePKWBIzMy/+kdTK3bxxZawoWmy3Ja1nfrockb6bxN4G9U5eunx2dGJi/GKeH5o69/rQ5KXLj505N3p6/PT4+ZFjx44eGX7yiZHHOxJnFtfNPW9d2Lf7xMsfPD82E69892nW3q35+nIcdQMrrrMa1ZjJzS3tqz0/tOL/fmfZVkonvevYEJalJyKyw1Wp9f/+6Im5g9cfz70zm/l6nRoIrJrs2rRj0dKe/G86e/0C/o0SfRy6VHHFz97/Fo+1HH+st+tPZ8/jtfhv5Y/6mt6o3cYYqL9j71li++MrrH9rRJyc/uvD7BEN70MAAHTWl9n459FG4780/lcqtz2fQxmIiEMRsTMi/hMRuyLivxG1sv+PiHuWWX91QX7x+OfHTW0F1qJs/PdUPrc1f/yX5iWS2dy2WvyV5NUzE+OH831yMCobsvxwkzq+evbn95daVy2N/7JHVn8xFszb8XvvhvnbnBqdGl1ByPNcfztiT2+j+JPZmYBsD+yOiD1t/P9sn5155JN9WXr7lsXrbx9/Ex2YZ5r5OOLh+vGfjgXxF5J6TUvNTw5tjInxw0PFWbHY9z9ce6Gcr5TS8+Lf2FpMG9sNtoHs+G9ueP7n8RfdoJivnVx+Hdd+fW/J9zSLj38SJ6fLJfLzv/QqkJ3/fclLtXRfvuzN0ampi8MRffmCectH5rYt8kX5LP6DBxr3/50Rf3+Ub7c3IrKT+N6IuC8i9udtvz8iHoiIA03i//aZB19rvofaPP87IIv/VLPjHzGQlOfr20j0nP3mi6Xqb+3172gtdTBf0srrX6sNXMm+AwAAgLtFWpuDTtLBqNTTpZtTu2JzOnFhcupQNd44f6o+Vz0QlbS409Vfuh86nN8bLvIjC/JHImJH7ZNGm2r5wbELE9vWM3Agtsz2/+K1IE0HB+vrfit/6KWTN52BO8ey5tHK3w787PPONwZYU76vCd1L/4fupf9D99L/oXs16v9XI26tQ1OANeb6D92rxf7ft9rtANae6z90L/0futLir8QXP7TQzjf95xI7T6xo81VPzPQvWNL6TwY0S0wvf6ueVYo0yj/asWQiiYj2qoi0eZm+Fmpft0R62zLH29wty0jszxMbIqLVra4226uViOjo+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3+ycAAP//rynbqw==") newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x6, 0xa2c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002a80], 0x0, &(0x7f0000000180), &(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYBLOB="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"]}, 0xaa4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x240400c0) write$P9_RSTAT(r3, &(0x7f0000000200)=ANY=[], 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f00000004c0)=0x40) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x24, 0x0, @void}, 0x10) 656.089179ms ago: executing program 4 (id=960): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 645.56224ms ago: executing program 1 (id=961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="ad63f529ad56baa4289e8f5e2267d0ce4d6ffd7211834c3d469dcb5b082b1a3a9408d61240fc40891f4c073234fa47842d5eb4709f723127d6139c23833621"], &(0x7f00000003c0)='GPL\x00', 0x690, 0xea, &(0x7f0000000400)=""/234, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x3f38cce, 0xfffffff7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x1, 0x9, 0x3}, {0x2, 0x1, 0x10, 0x6}, {0x3, 0x1, 0xa, 0x8}, {0x3, 0x2, 0xe, 0xf}, {0x5, 0x5, 0x1, 0xb}, {0x1, 0x5, 0xa}, {0x2, 0x1, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='f2fs_truncate_data_blocks_range\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180d0000209920702500000010000022ccf16c01291fff00000000bfa100000000000007010000f8ffffffb7ff000000000000b70300000000fd38850000007200000095000000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x4b, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x800000000008, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r7, @ANYBLOB="18000880"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$TUNSETIFF(r10, 0x400454da, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x109200, 0x0) ioctl$TUNSETIFF(r11, 0x400454da, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) 595.85333ms ago: executing program 1 (id=962): r0 = io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x560f, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 500.197092ms ago: executing program 2 (id=963): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6000, 0x80, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, r3) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="040006000000000008010000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES16=r1, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="10000500000000002000070000000000"], 0x6c, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000740), &(0x7f0000000280)}, 0x12) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r9 = dup3(r7, r6, 0x80000) io_submit(r8, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x6, 0x0, 0x0, r6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xb7bd, r7, &(0x7f0000000540)="6da8dd3a3ce543dfcbeb78ab5223dea15b3c8273d92cb4688b03cd0f92027a96e6c0689d33a3a0e432785858dc86b41ae0790a897be4bd55696cb58767aaf5b6ee3cbbf4b4836d9caf72009e3398ea7ca93a3e82a142558519bbe4eac83789a2d6d17f7f9882a34bfe367754773724295f14686c8279e5096677027a0fba9552261720de47fffe053af0d16db65f1e905aefea4f3acd860378d158ee6db57ca8e7ad7714251017b693ca9321d816a0caff80dd7dd9eb65c5c87517b2", 0xbc, 0x0, 0x0, 0x0, r9}]) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r11) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random, 'bond0\x00'}}, 0x1e) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) connect$pppoe(r10, &(0x7f0000000480)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bridge_slave_0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) 330.539035ms ago: executing program 0 (id=964): r0 = socket(0xa, 0x3, 0x3a) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @x25={0x2, 0x1d, 0xb, "ab2cb8cdcf0dfd2d4749f16e1fb6496c8fe819c5faaac55e0bceb758da58f143d1c5c4e2170237b8e9a91b3af65471eef54df185b0bb1a89b2b917653f3e3e3b0d8b5eae61fc82bafd78bb56c0ce23276b55d97b80ee6bd23a8d6bdc2c06b5a4d2456545875044a8dc1481ebd24c8bb93cbfe1a3f69c0ef7223cbdb36951246234e5bbe81ca2e40b40c6382e68a54768cce1798d09d0d15a74b82dcc541836606b718f759dd5349816a6c8882e343d3876136c56bb0dbb53a1c6d3f68ed117eec58dd706f40ac5c910"}}, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000280), &(0x7f0000000300)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, r4}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r3], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x3aa}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@s}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0x3, 0x7, 0x0, 0x5, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2ecd, 0xf9, &(0x7f00000007c0)=""/249, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x7, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) 250.950246ms ago: executing program 0 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r6, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000010405000000a8527b33e80d18f4e2346af800000000000000000006060006400006000008000340000000060500010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000) r9 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x4c}}, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000800), 0x7fffffffffffffff, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r12, 0x65, 0x80000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000840)={'\x00', 0x8, 0x57, 0x1, 0xfffffffffffffffc, 0x5}) 0s ago: executing program 2 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x1a, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000800000008", @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES32=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="796104000000000001007e190000"], 0x14}}, 0x0) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r12, @ANYRES8=r10], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 6 audit(1753655011.295:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.869652][ T29] audit: type=1326 audit(1753655011.295:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.893061][ T29] audit: type=1326 audit(1753655011.295:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.917054][ T29] audit: type=1326 audit(1753655011.295:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.941004][ T29] audit: type=1326 audit(1753655011.295:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.964342][ T29] audit: type=1326 audit(1753655011.295:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.988266][ T29] audit: type=1326 audit(1753655011.295:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 62.991608][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 63.011608][ T29] audit: type=1326 audit(1753655011.295:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 63.120274][ T4963] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 63.140722][ T4963] $H: left promiscuous mode [ 63.145568][ T4963] bond_slave_0: left promiscuous mode [ 63.154199][ T4963] bond_slave_1: left promiscuous mode [ 63.244590][ T4963] 8021q: adding VLAN 0 to HW filter on device $H [ 63.258182][ T4963] $H: entered promiscuous mode [ 63.264466][ T4963] bond_slave_0: entered promiscuous mode [ 63.270847][ T4963] bond_slave_1: entered promiscuous mode [ 63.276870][ T4963] $H: entered allmulticast mode [ 63.282093][ T4963] bond_slave_0: entered allmulticast mode [ 63.287916][ T4963] bond_slave_1: entered allmulticast mode [ 63.307108][ T4963] team0: Port device $H added [ 63.486397][ T4978] lo speed is unknown, defaulting to 1000 [ 63.542632][ T4983] netlink: 'syz.3.312': attribute type 13 has an invalid length. [ 63.551098][ T4983] netlink: 'syz.3.312': attribute type 17 has an invalid length. [ 63.608249][ T4983] tipc: Resetting bearer [ 63.615158][ T4983] tipc: Resetting bearer [ 63.622311][ T4983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.745744][ T4993] loop3: detected capacity change from 0 to 256 [ 63.902529][ T4997] loop3: detected capacity change from 0 to 512 [ 63.914432][ T4997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.931437][ T4997] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 63.943474][ T4997] team0: Failed to send options change via netlink (err -105) [ 63.951203][ T4997] team0: Port device dummy0 added [ 63.964728][ T4996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.082554][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 64.245839][ T5009] $H: left promiscuous mode [ 64.250895][ T5009] bond_slave_0: left promiscuous mode [ 64.256620][ T5009] bond_slave_1: left promiscuous mode [ 64.262677][ T5009] $H: left allmulticast mode [ 64.268175][ T5009] bond_slave_0: left allmulticast mode [ 64.273935][ T5009] bond_slave_1: left allmulticast mode [ 64.296956][ T5009] team0: Port device $H removed [ 64.303214][ T5009] bridge0: port 3(team0) entered disabled state [ 64.311359][ T5009] bridge_slave_0: left allmulticast mode [ 64.317159][ T5009] bridge_slave_0: left promiscuous mode [ 64.323143][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.336915][ T5009] bridge_slave_1: left allmulticast mode [ 64.342814][ T5009] bridge_slave_1: left promiscuous mode [ 64.348805][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.361609][ T5009] $H: (slave bond_slave_0): Releasing backup interface [ 64.381524][ T5009] $H: (slave bond_slave_1): Releasing backup interface [ 64.394276][ T5009] team_slave_0: left promiscuous mode [ 64.400500][ T5009] team_slave_0: left allmulticast mode [ 64.425919][ T5009] team0: Port device team_slave_0 removed [ 64.437637][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.447676][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.457464][ T5016] team0: Mode changed to "loadbalance" [ 64.463675][ T5018] vlan0: entered promiscuous mode [ 64.470502][ T5022] tipc: Started in network mode [ 64.475916][ T5022] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 64.483480][ T5022] tipc: Enabled bearer , priority 0 [ 64.663127][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 64.685432][ T5031] netlink: 'syz.1.325': attribute type 13 has an invalid length. [ 64.693846][ T5031] netlink: 'syz.1.325': attribute type 17 has an invalid length. [ 64.822677][ T5031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.838778][ T23] lo speed is unknown, defaulting to 1000 [ 64.845725][ T5036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.327'. [ 64.854712][ T5036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.327'. [ 64.864324][ T5036] netlink: 38 bytes leftover after parsing attributes in process `syz.0.327'. [ 65.448006][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.337'. [ 65.479719][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 65.496712][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 65.598954][ T9] tipc: Node number set to 11578026 [ 65.838865][ T10] usb 10-1: device descriptor read/8, error -110 [ 65.892364][ T5076] netlink: 'syz.0.339': attribute type 13 has an invalid length. [ 65.900395][ T5076] netlink: 'syz.0.339': attribute type 17 has an invalid length. [ 65.910119][ T5075] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 65.934129][ T5076] sit0: left allmulticast mode [ 65.949066][ T10] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.960446][ T5076] 8021q: adding VLAN 0 to HW filter on device $H [ 65.969749][ T10] usb 10-1: enqueue for inactive port 0 [ 65.975648][ T5076] team0: left promiscuous mode [ 65.981618][ T10] usb 10-1: enqueue for inactive port 0 [ 65.989251][ T10] usb 10-1: enqueue for inactive port 0 [ 65.995036][ T5076] team0: left allmulticast mode [ 66.001452][ T5081] loop9: detected capacity change from 0 to 7 [ 66.003493][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.015022][ T5081] buffer_io_error: 2 callbacks suppressed [ 66.015115][ T5081] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.037993][ T5076] tipc: Resetting bearer [ 66.053463][ T5081] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.053529][ T5076] tipc: Resetting bearer [ 66.061313][ T5081] loop9: unable to read partition table [ 66.069660][ T5081] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 66.069660][ T5081] ) failed (rc=-5) [ 66.090432][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.098432][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.108027][ T5076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.127554][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.135668][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.150013][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.240922][ T5090] SELinux: syz.2.343 (5090) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.629638][ T5113] $H: renamed from bond0 (while UP) [ 66.637070][ T5113] $H: entered promiscuous mode [ 66.663909][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 66.789877][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 67.009424][ T10] usb usb10-port1: attempt power cycle [ 67.471128][ T5141] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.478387][ T5141] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 67.546425][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'. [ 67.663455][ T5151] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 67.673313][ T5151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.684310][ T5151] team0: Port device bond0 added [ 68.038373][ T5175] loop2: detected capacity change from 0 to 512 [ 68.126251][ T5175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.143636][ T5175] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 68.155759][ T5175] team0: Port device dummy0 added [ 68.185308][ T5174] lo speed is unknown, defaulting to 1000 [ 68.274122][ T5173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.569744][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 68.569758][ T29] audit: type=1326 audit(1753655018.069:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.641961][ T29] audit: type=1326 audit(1753655018.069:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.665509][ T29] audit: type=1326 audit(1753655018.099:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.689488][ T29] audit: type=1326 audit(1753655018.099:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.713032][ T29] audit: type=1326 audit(1753655018.099:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.737137][ T29] audit: type=1326 audit(1753655018.119:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.760985][ T29] audit: type=1326 audit(1753655018.119:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.784996][ T29] audit: type=1326 audit(1753655018.119:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.809068][ T29] audit: type=1326 audit(1753655018.119:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 68.832534][ T29] audit: type=1326 audit(1753655018.119:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f223be9e3 code=0x7ffc0000 [ 69.081076][ T5219] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 69.096657][ T5218] loop4: detected capacity change from 0 to 512 [ 69.116714][ T5218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.139904][ T5218] EXT4-fs (loop4): 1 truncate cleaned up [ 69.149691][ T10] usb usb10-port1: unable to enumerate USB device [ 69.162515][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.332589][ T5243] bridge0: entered promiscuous mode [ 69.340295][ T5243] bridge0: port 1(macvlan2) entered blocking state [ 69.346881][ T5243] bridge0: port 1(macvlan2) entered disabled state [ 69.367966][ T5243] macvlan2: entered allmulticast mode [ 69.374029][ T5243] bridge0: entered allmulticast mode [ 69.411058][ T5243] macvlan2: left allmulticast mode [ 69.416278][ T5243] bridge0: left allmulticast mode [ 69.441880][ T5243] bridge0: left promiscuous mode [ 69.469829][ T5239] $H: renamed from bond0 (while UP) [ 69.478416][ T5239] $H: entered promiscuous mode [ 69.483791][ T5239] bond_slave_0: entered promiscuous mode [ 69.489738][ T5239] bond_slave_1: entered promiscuous mode [ 69.561178][ T5264] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 69.697849][ T5262] __nla_validate_parse: 5 callbacks suppressed [ 69.697873][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 69.965069][ T5276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 69.976702][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.118922][ T5278] loop4: detected capacity change from 0 to 512 [ 70.126588][ T5278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.152314][ T5278] EXT4-fs (loop4): 1 truncate cleaned up [ 70.158736][ T5278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.216380][ T5278] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 70.223030][ T5278] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.231120][ T5278] vhci_hcd vhci_hcd.0: Device attached [ 70.248790][ T5282] vhci_hcd: connection closed [ 70.249887][ T4428] vhci_hcd: stop threads [ 70.259260][ T4428] vhci_hcd: release socket [ 70.263815][ T4428] vhci_hcd: disconnect device [ 70.520253][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 70.562135][ T5291] hub 9-0:1.0: USB hub found [ 70.566882][ T5291] hub 9-0:1.0: 8 ports detected [ 70.647526][ T5294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 70.727253][ T5301] syzkaller1: entered promiscuous mode [ 70.732979][ T5301] syzkaller1: entered allmulticast mode [ 70.803741][ T5300] lo speed is unknown, defaulting to 1000 [ 70.990616][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.086073][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 72.442202][ T5306] serio: Serial port ptm0 [ 72.805153][ T5330] netlink: 'syz.4.404': attribute type 4 has an invalid length. [ 72.850810][ T5333] loop4: detected capacity change from 0 to 128 [ 72.885755][ T5333] FAT-fs (loop4): Directory bread(block 32) failed [ 72.888243][ T5329] lo speed is unknown, defaulting to 1000 [ 72.893489][ T5333] FAT-fs (loop4): Directory bread(block 33) failed [ 72.921395][ T5333] FAT-fs (loop4): Directory bread(block 34) failed [ 73.029190][ T5333] FAT-fs (loop4): Directory bread(block 35) failed [ 73.035771][ T5333] FAT-fs (loop4): Directory bread(block 36) failed [ 73.139471][ T5333] FAT-fs (loop4): Directory bread(block 37) failed [ 73.148577][ T5333] FAT-fs (loop4): Directory bread(block 38) failed [ 73.177297][ T5333] FAT-fs (loop4): Directory bread(block 39) failed [ 73.192709][ T5333] FAT-fs (loop4): Directory bread(block 40) failed [ 73.200715][ T5333] FAT-fs (loop4): Directory bread(block 41) failed [ 73.345789][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 73.400921][ T5333] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 73.408733][ T5333] FAT-fs (loop4): Filesystem has been set read-only [ 73.474663][ T5347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 73.484244][ T5347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 73.493133][ T5347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 73.507440][ T5347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 73.933215][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 73.933229][ T29] audit: type=1400 audit(1753655023.429:6760): avc: denied { create } for pid=5360 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.975931][ T5361] loop4: detected capacity change from 0 to 512 [ 73.990836][ T5361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.004101][ T5361] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.017119][ T5361] Cannot find add_set index 0 as target [ 74.025920][ T5361] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 74.041601][ T5361] EXT4-fs (loop4): Remounting filesystem read-only [ 74.042399][ T5359] sit0: entered allmulticast mode [ 74.065305][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.075072][ T29] audit: type=1400 audit(1753655023.559:6761): avc: denied { getopt } for pid=5358 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.095853][ T4390] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.110015][ T4390] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 74.129963][ T29] audit: type=1400 audit(1753655023.629:6762): avc: denied { create } for pid=5369 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.179134][ T29] audit: type=1400 audit(1753655023.649:6763): avc: denied { ioctl } for pid=5367 comm="syz.3.416" path="socket:[9236]" dev="sockfs" ino=9236 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.236534][ T29] audit: type=1400 audit(1753655023.729:6764): avc: denied { connect } for pid=5374 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.275488][ T29] audit: type=1326 audit(1753655023.769:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 74.300362][ T29] audit: type=1400 audit(1753655023.769:6767): avc: denied { write } for pid=5367 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.320522][ T29] audit: type=1400 audit(1753655023.769:6768): avc: denied { connect } for pid=5367 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.929896][ T5394] siw: device registration error -23 [ 75.246584][ T5387] SELinux: syz.1.421 (5387) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.381962][ T5409] netlink: 'syz.0.429': attribute type 3 has an invalid length. [ 75.449856][ T5415] __nla_validate_parse: 5 callbacks suppressed [ 75.449951][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'. [ 75.465308][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 75.474882][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'. [ 75.521742][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'. [ 75.657079][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 75.666149][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'. [ 75.675155][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 75.689006][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 76.190295][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 76.204461][ T5425] bridge0: port 1(macvlan2) entered blocking state [ 76.211410][ T5425] bridge0: port 1(macvlan2) entered disabled state [ 76.218345][ T5429] Cannot find add_set index 0 as target [ 76.220228][ T5425] macvlan2: entered allmulticast mode [ 76.229757][ T5425] bridge0: entered allmulticast mode [ 76.242398][ T5425] macvlan2: left allmulticast mode [ 76.247772][ T5425] bridge0: left allmulticast mode [ 76.350938][ T5435] siw: device registration error -23 [ 76.439171][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 76.536105][ T5443] lo speed is unknown, defaulting to 1000 [ 76.742788][ T5453] netlink: 'syz.2.441': attribute type 13 has an invalid length. [ 76.751393][ T5453] netlink: 'syz.2.441': attribute type 17 has an invalid length. [ 76.820532][ T5453] $H: left promiscuous mode [ 76.829127][ T5453] 8021q: adding VLAN 0 to HW filter on device $H [ 76.859950][ T5453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.296913][ T5470] lo speed is unknown, defaulting to 1000 [ 77.794672][ T5494] bridge0: port 3(macvlan0) entered blocking state [ 77.801406][ T5494] bridge0: port 3(macvlan0) entered disabled state [ 77.808735][ T5494] macvlan0: entered allmulticast mode [ 77.814162][ T5494] bridge0: entered allmulticast mode [ 77.822594][ T5494] macvlan0: left allmulticast mode [ 77.827738][ T5494] bridge0: left allmulticast mode [ 78.198433][ T5513] vlan2: entered allmulticast mode [ 78.203790][ T5513] dummy0: entered allmulticast mode [ 78.281402][ T5522] loop9: detected capacity change from 0 to 7 [ 78.287735][ T5522] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.295748][ T5522] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.303644][ T5524] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 78.315576][ T5522] loop9: unable to read partition table [ 78.322909][ T5522] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 78.322909][ T5522] ) failed (rc=-5) [ 78.337261][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.355579][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.366926][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.378317][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.386505][ T3547] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.413407][ T5522] lo speed is unknown, defaulting to 1000 [ 78.961521][ T5536] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 78.968131][ T5536] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.975955][ T5536] vhci_hcd vhci_hcd.0: Device attached [ 79.004257][ T5540] vhci_hcd: connection closed [ 79.004432][ T12] vhci_hcd: stop threads [ 79.013468][ T12] vhci_hcd: release socket [ 79.017897][ T12] vhci_hcd: disconnect device [ 79.544758][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 79.544771][ T29] audit: type=1326 audit(1753655029.039:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 79.598972][ T29] audit: type=1326 audit(1753655029.039:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 79.621966][ T29] audit: type=1326 audit(1753655029.039:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 79.644868][ T29] audit: type=1326 audit(1753655029.039:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc97196e9e3 code=0x7ffc0000 [ 79.667686][ T29] audit: type=1326 audit(1753655029.039:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc97196d45f code=0x7ffc0000 [ 79.690535][ T29] audit: type=1326 audit(1753655029.039:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc97196ea37 code=0x7ffc0000 [ 79.713371][ T29] audit: type=1326 audit(1753655029.039:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc97196d310 code=0x7ffc0000 [ 79.736550][ T29] audit: type=1326 audit(1753655029.039:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc97196d60a code=0x7ffc0000 [ 79.759288][ T29] audit: type=1326 audit(1753655029.039:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 79.782299][ T29] audit: type=1326 audit(1753655029.039:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 79.986526][ T5570] futex_wake_op: syz.0.481 tries to shift op by 144; fix this program [ 80.082375][ T5582] block device autoloading is deprecated and will be removed. [ 80.524944][ T5586] __nla_validate_parse: 23 callbacks suppressed [ 80.524959][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 80.596165][ T5593] lo speed is unknown, defaulting to 1000 [ 80.873161][ T3380] IPVS: starting estimator thread 0... [ 81.013219][ T5608] IPVS: using max 2496 ests per chain, 124800 per kthread [ 82.050858][ T5617] netlink: 'syz.1.493': attribute type 3 has an invalid length. [ 82.091123][ T5630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.100241][ T5630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.109780][ T5630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.119568][ T5630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.140106][ T5627] $H: entered promiscuous mode [ 82.313088][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 82.324532][ T5632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.498'. [ 82.448221][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 82.595836][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 83.646177][ T5653] lo speed is unknown, defaulting to 1000 [ 84.133190][ T5667] lo speed is unknown, defaulting to 1000 [ 84.794702][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 84.794717][ T29] audit: type=1400 audit(1753655034.289:7341): avc: denied { create } for pid=5666 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.854215][ T5674] lo speed is unknown, defaulting to 1000 [ 85.006356][ T5683] lo speed is unknown, defaulting to 1000 [ 85.048447][ T5670] loop1: detected capacity change from 0 to 512 [ 85.073055][ T5682] netlink: 'syz.2.513': attribute type 3 has an invalid length. [ 85.116715][ T5670] EXT4-fs: Ignoring removed bh option [ 85.158027][ T5667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.164725][ T5667] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 85.172484][ T5667] audit: backlog limit exceeded [ 85.241455][ T5688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.248088][ T5688] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 85.255880][ T5688] audit: backlog limit exceeded [ 85.277761][ T5670] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.286895][ T5670] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 85.353601][ T5682] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.360242][ T5682] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 85.367941][ T5682] audit: backlog limit exceeded [ 85.452309][ T5670] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 85.462327][ T5670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 85.473385][ T5670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.939640][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 85.950766][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.985798][ T5702] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.173302][ T5704] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 86.181328][ T5704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 86.237459][ T5704] dummy0: entered promiscuous mode [ 86.247425][ T5707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 86.279527][ T5704] bridge0: port 3(dummy0) entered blocking state [ 86.286194][ T5704] bridge0: port 3(dummy0) entered disabled state [ 86.302156][ T5704] dummy0: entered allmulticast mode [ 86.313019][ T5704] bridge0: port 3(dummy0) entered blocking state [ 86.319680][ T5704] bridge0: port 3(dummy0) entered forwarding state [ 86.330133][ T5702] lo speed is unknown, defaulting to 1000 [ 86.349691][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 86.817572][ T5718] bridge0: entered promiscuous mode [ 86.877646][ T5718] macsec0: entered promiscuous mode [ 86.941721][ T5718] bridge0: port 1(macsec0) entered blocking state [ 86.948461][ T5718] bridge0: port 1(macsec0) entered disabled state [ 87.048763][ T5718] macsec0: entered allmulticast mode [ 87.054445][ T5718] bridge0: entered allmulticast mode [ 87.128331][ T5718] macsec0: left allmulticast mode [ 87.133945][ T5718] bridge0: left allmulticast mode [ 87.225704][ T5718] bridge0: left promiscuous mode [ 87.795142][ T5729] lo speed is unknown, defaulting to 1000 [ 87.918293][ T5745] lo speed is unknown, defaulting to 1000 [ 88.108488][ T5736] lo speed is unknown, defaulting to 1000 [ 88.979187][ T5736] uprobe: syz.4.525:5736 failed to unregister, leaking uprobe [ 89.111874][ T5756] netlink: 'syz.4.527': attribute type 3 has an invalid length. [ 89.263652][ T5761] netlink: 100 bytes leftover after parsing attributes in process `syz.3.529'. [ 89.276573][ T5767] loop1: detected capacity change from 0 to 128 [ 89.294703][ T5767] FAT-fs (loop1): invalid media value (0x00) [ 89.300974][ T5767] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 89.310603][ T5767] FAT-fs (loop1): Can't find a valid FAT filesystem [ 89.483406][ T5759] netlink: 'syz.2.531': attribute type 3 has an invalid length. [ 89.491659][ T5759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.531'. [ 89.805708][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 89.805720][ T29] audit: type=1326 audit(1753655039.299:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc971965967 code=0x7ffc0000 [ 89.836057][ T29] audit: type=1326 audit(1753655039.299:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc97190ab89 code=0x7ffc0000 [ 89.859955][ T29] audit: type=1326 audit(1753655039.299:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 89.883491][ T29] audit: type=1326 audit(1753655039.329:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc971965967 code=0x7ffc0000 [ 89.907491][ T29] audit: type=1326 audit(1753655039.329:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc97190ab89 code=0x7ffc0000 [ 89.914756][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 89.931633][ T29] audit: type=1326 audit(1753655039.339:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 89.964141][ T29] audit: type=1326 audit(1753655039.339:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc971965967 code=0x7ffc0000 [ 89.987468][ T29] audit: type=1326 audit(1753655039.339:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc97190ab89 code=0x7ffc0000 [ 90.011537][ T29] audit: type=1326 audit(1753655039.339:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 90.034961][ T29] audit: type=1326 audit(1753655039.349:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc971965967 code=0x7ffc0000 [ 90.111131][ T5782] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.209614][ T5782] lo speed is unknown, defaulting to 1000 [ 90.284993][ T5789] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 90.293115][ T5789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 90.329608][ T5789] dummy0: entered promiscuous mode [ 90.390630][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 90.421367][ T5789] team0: Port device dummy0 removed [ 90.437675][ T5789] bridge0: port 1(dummy0) entered blocking state [ 90.444350][ T5789] bridge0: port 1(dummy0) entered disabled state [ 90.500064][ T5794] lo speed is unknown, defaulting to 1000 [ 90.526760][ T4390] tipc: Resetting bearer [ 90.826415][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 91.716087][ T5817] rdma_rxe: rxe_newlink: failed to add syz_tun [ 91.747407][ T5815] netlink: 'syz.0.545': attribute type 10 has an invalid length. [ 91.768520][ T5815] team0: Device dummy0 failed to register rx_handler [ 91.793718][ T5813] lo speed is unknown, defaulting to 1000 [ 92.004982][ T5831] random: crng reseeded on system resumption [ 92.090935][ T5832] lo speed is unknown, defaulting to 1000 [ 93.421266][ T5817] Set syz1 is full, maxelem 65536 reached [ 93.651974][ T5841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.715729][ T5841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.740117][ T5847] loop4: detected capacity change from 0 to 512 [ 93.775518][ T5841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.790698][ T5847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 93.808014][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 93.837082][ T23] IPVS: starting estimator thread 0... [ 93.846017][ T5854] loop1: detected capacity change from 0 to 2048 [ 93.910350][ T5847] System zones: 1-12 [ 93.915282][ T5847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.553: error while reading EA inode 32 err=-116 [ 93.949157][ T5855] IPVS: using max 2880 ests per chain, 144000 per kthread [ 93.975009][ T5854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.020618][ T5841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.077662][ T5847] EXT4-fs (loop4): Remounting filesystem read-only [ 94.084388][ T5847] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.172540][ T5841] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.195421][ T5847] EXT4-fs (loop4): 1 orphan inode deleted [ 94.224066][ T5843] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.550: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 94.243717][ T5847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.262350][ T5841] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.275494][ T5862] tipc: Enabled bearer , priority 0 [ 94.288637][ T5841] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300696][ T5854] netlink: 100 bytes leftover after parsing attributes in process `syz.1.550'. [ 94.312316][ T5862] 9pnet_fd: Insufficient options for proto=fd [ 94.324012][ T5841] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.337548][ T5843] EXT4-fs (loop1): Remounting filesystem read-only [ 94.673082][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.810523][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 94.810536][ T29] audit: type=1326 audit(1753655044.309:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1d3e05967 code=0x7ffc0000 [ 94.861504][ T29] audit: type=1326 audit(1753655044.339:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1d3daab89 code=0x7ffc0000 [ 94.885146][ T29] audit: type=1326 audit(1753655044.339:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1d3e05967 code=0x7ffc0000 [ 94.908399][ T29] audit: type=1326 audit(1753655044.339:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1d3daab89 code=0x7ffc0000 [ 94.961808][ T29] audit: type=1326 audit(1753655044.369:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1d3e05967 code=0x7ffc0000 [ 94.985179][ T29] audit: type=1326 audit(1753655044.369:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1d3daab89 code=0x7ffc0000 [ 95.009124][ T29] audit: type=1326 audit(1753655044.369:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 95.032696][ T29] audit: type=1326 audit(1753655044.379:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1d3e05967 code=0x7ffc0000 [ 95.056685][ T29] audit: type=1326 audit(1753655044.379:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1d3daab89 code=0x7ffc0000 [ 95.082201][ T29] audit: type=1326 audit(1753655044.379:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 95.144837][ T5875] lo speed is unknown, defaulting to 1000 [ 95.266001][ T5875] lo speed is unknown, defaulting to 1000 [ 95.390196][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.523603][ T5880] netlink: 'syz.0.562': attribute type 13 has an invalid length. [ 95.622046][ T5885] netlink: 'syz.1.564': attribute type 13 has an invalid length. [ 95.653422][ T5880] gretap0: refused to change device tx_queue_len [ 95.662320][ T5880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 95.834736][ T5897] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 95.882528][ T5885] bridge0: port 3(dummy0) entered disabled state [ 95.889064][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.896323][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.000296][ T5885] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.009760][ T5885] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.019058][ T5885] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.027993][ T5885] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.048193][ T36] lo speed is unknown, defaulting to 1000 [ 96.054157][ T36] syz0: Port: 1 Link DOWN [ 96.076812][ T5888] netlink: 5 bytes leftover after parsing attributes in process `syz.2.565'. [ 96.104505][ T5897] $H: left promiscuous mode [ 96.116064][ T5920] loop4: detected capacity change from 0 to 512 [ 96.123501][ T5920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.138050][ T5897] 8021q: adding VLAN 0 to HW filter on device $H [ 96.146535][ T5897] team0: Port device $H added [ 96.153809][ T5907] syz1: Port: 1 Link DOWN [ 96.204419][ T5920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 96.225222][ T5920] EXT4-fs (loop4): 1 truncate cleaned up [ 96.233893][ T5920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.251308][ T5920] random: crng reseeded on system resumption [ 96.367243][ T5927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.387472][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.439860][ T5941] loop4: detected capacity change from 0 to 128 [ 96.449862][ T5927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.478344][ T5941] FAT-fs (loop4): Directory bread(block 32) failed [ 96.492905][ T5931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.570'. [ 96.503344][ T5941] FAT-fs (loop4): Directory bread(block 33) failed [ 96.510206][ T5941] FAT-fs (loop4): Directory bread(block 34) failed [ 96.517011][ T5941] FAT-fs (loop4): Directory bread(block 35) failed [ 96.524642][ T5927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.526249][ T5941] FAT-fs (loop4): Directory bread(block 36) failed [ 96.542620][ T5941] FAT-fs (loop4): Directory bread(block 37) failed [ 96.549333][ T5941] FAT-fs (loop4): Directory bread(block 38) failed [ 96.555939][ T5941] FAT-fs (loop4): Directory bread(block 39) failed [ 96.562535][ T5941] FAT-fs (loop4): Directory bread(block 40) failed [ 96.569198][ T5941] FAT-fs (loop4): Directory bread(block 41) failed [ 96.583453][ T5927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.640712][ T5927] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.653751][ T5927] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.666884][ T5927] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.678637][ T5927] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.703418][ T5941] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 96.711049][ T5941] FAT-fs (loop4): Filesystem has been set read-only [ 96.772809][ T5947] netlink: 'syz.2.574': attribute type 46 has an invalid length. [ 96.782322][ T5947] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 96.905120][ T5951] team0: Port device bond0 removed [ 96.989658][ T5954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.192018][ T5963] netlink: 'syz.1.579': attribute type 13 has an invalid length. [ 97.254908][ T5963] gretap0: refused to change device tx_queue_len [ 97.271128][ T5963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.288853][ T5903] lo speed is unknown, defaulting to 1000 [ 97.294669][ T5903] syz0: Port: 1 Link ACTIVE [ 97.361875][ T5976] netlink: 'syz.4.582': attribute type 13 has an invalid length. [ 97.433201][ T5963] netlink: '//': attribute type 1 has an invalid length. [ 97.440391][ T5963] netlink: 224 bytes leftover after parsing attributes in process `//'. [ 97.516238][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 97.563942][ T5983] loop4: detected capacity change from 0 to 128 [ 97.586512][ T5983] /dev/loop4: Can't open blockdev [ 97.609993][ T5985] loop1: detected capacity change from 0 to 128 [ 97.623908][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.639229][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.656473][ T5985] FAT-fs (loop1): Directory bread(block 32) failed [ 97.676786][ T5985] FAT-fs (loop1): Directory bread(block 33) failed [ 97.683822][ T5985] FAT-fs (loop1): Directory bread(block 34) failed [ 97.691244][ T5985] FAT-fs (loop1): Directory bread(block 35) failed [ 97.718225][ T5985] FAT-fs (loop1): Directory bread(block 36) failed [ 97.728849][ T5985] FAT-fs (loop1): Directory bread(block 37) failed [ 97.735497][ T5985] FAT-fs (loop1): Directory bread(block 38) failed [ 97.742295][ T5985] FAT-fs (loop1): Directory bread(block 39) failed [ 97.750800][ T5985] FAT-fs (loop1): Directory bread(block 40) failed [ 97.759725][ T5985] FAT-fs (loop1): Directory bread(block 41) failed [ 97.920024][ T5985] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 97.927755][ T5985] FAT-fs (loop1): Filesystem has been set read-only [ 98.223205][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 98.315295][ T6027] netlink: 'syz.0.597': attribute type 3 has an invalid length. [ 98.323648][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.597'. [ 98.382022][ T6026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.796266][ T6035] loop4: detected capacity change from 0 to 512 [ 98.853483][ T6035] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 98.862361][ T6035] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.023865][ T6035] EXT4-fs (loop4): 1 orphan inode deleted [ 99.139316][ T4377] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 99.179808][ T6035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.260510][ T6048] netlink: 'syz.2.596': attribute type 13 has an invalid length. [ 99.343749][ T6052] netlink: 'syz.3.598': attribute type 8 has an invalid length. [ 99.423178][ T6058] loop1: detected capacity change from 0 to 1024 [ 99.438099][ T6048] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.446677][ T6048] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.455550][ T6048] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.464087][ T6048] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.474322][ T6058] EXT4-fs: Ignoring removed oldalloc option [ 99.480484][ T6058] EXT4-fs: Ignoring removed orlov option [ 99.501172][ T6058] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 99.522469][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.580070][ T6058] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.599: Allocating blocks 497-513 which overlap fs metadata [ 99.738548][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.890242][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 99.900266][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.906353][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 100.012774][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 100.012791][ T29] audit: type=1326 audit(1753655049.509:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.055231][ T29] audit: type=1326 audit(1753655049.509:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.079283][ T29] audit: type=1326 audit(1753655049.509:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.102823][ T29] audit: type=1326 audit(1753655049.509:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.126161][ T29] audit: type=1326 audit(1753655049.509:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.149677][ T29] audit: type=1326 audit(1753655049.519:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.173047][ T29] audit: type=1326 audit(1753655049.519:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.196381][ T29] audit: type=1326 audit(1753655049.519:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.219758][ T29] audit: type=1326 audit(1753655049.519:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.243305][ T29] audit: type=1326 audit(1753655049.519:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6071 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97196e9a9 code=0x7ffc0000 [ 100.776749][ T6114] lo speed is unknown, defaulting to 1000 [ 100.806408][ T6120] xt_CT: No such helper "pptp" [ 101.228675][ T6131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.307118][ T6134] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.432696][ T6134] lo speed is unknown, defaulting to 1000 [ 101.502434][ T6140] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 101.510417][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.611'. [ 101.576494][ T6140] dummy0: entered promiscuous mode [ 101.584776][ T6140] team0: Port device dummy0 removed [ 101.591917][ T6140] bridge0: port 1(dummy0) entered blocking state [ 101.598384][ T6140] bridge0: port 1(dummy0) entered disabled state [ 101.617374][ T6140] dummy0: entered allmulticast mode [ 101.660876][ T6139] lo speed is unknown, defaulting to 1000 [ 101.694755][ T6138] loop1: detected capacity change from 0 to 1024 [ 101.701945][ T6138] EXT4-fs: inline encryption not supported [ 101.708707][ T6138] EXT4-fs: Ignoring removed bh option [ 101.749698][ T6138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.752128][ T6147] netlink: 'syz.2.614': attribute type 8 has an invalid length. [ 102.194393][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.263649][ T6156] loop4: detected capacity change from 0 to 1024 [ 102.271496][ T6156] EXT4-fs: Ignoring removed nobh option [ 102.294222][ T6156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.338117][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 102.398094][ T6161] random: crng reseeded on system resumption [ 102.411453][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.422961][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 102.490930][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 103.105587][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 103.115051][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 103.127407][ T6172] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 103.134817][ T6172] netlink: 100 bytes leftover after parsing attributes in process `syz.1.622'. [ 103.313395][ T6185] tipc: Started in network mode [ 103.318380][ T6185] tipc: Node identity aaaaaaaaaa21, cluster identity 4711 [ 103.325622][ T6185] tipc: Enabled bearer , priority 0 [ 103.346534][ T6185] 9pnet_fd: Insufficient options for proto=fd [ 103.803641][ T6178] lo speed is unknown, defaulting to 1000 [ 103.860258][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 103.869197][ T6193] netlink: 'syz.2.628': attribute type 6 has an invalid length. [ 104.439628][ T5915] tipc: Node number set to 9153194 [ 104.534293][ T6203] loop1: detected capacity change from 0 to 1024 [ 104.542641][ T6203] ext4: Bad value for 'stripe' [ 104.636060][ T6211] netlink: 'syz.1.633': attribute type 46 has an invalid length. [ 104.687378][ T6217] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 104.791530][ T6211] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 104.891083][ T6222] loop1: detected capacity change from 0 to 128 [ 105.003130][ T6223] lo speed is unknown, defaulting to 1000 [ 105.350708][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 105.350723][ T29] audit: type=1400 audit(1753655054.849:9633): avc: denied { connect } for pid=6225 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.651551][ T29] audit: type=1400 audit(1753655054.879:9634): avc: denied { write } for pid=6225 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.671525][ T29] audit: type=1400 audit(1753655055.129:9635): avc: denied { bind } for pid=6225 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.794347][ T6222] FAT-fs (loop1): Directory bread(block 32) failed [ 105.801001][ T29] audit: type=1400 audit(1753655055.199:9636): avc: denied { read } for pid=6225 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.822721][ T6222] FAT-fs (loop1): Directory bread(block 33) failed [ 105.853177][ T6222] FAT-fs (loop1): Directory bread(block 34) failed [ 105.864010][ T6237] futex_wake_op: syz.2.638 tries to shift op by 144; fix this program [ 105.883121][ T6222] FAT-fs (loop1): Directory bread(block 35) failed [ 105.891181][ T6228] 9pnet: Could not find request transport: 0xffffffffffffffff [ 105.903536][ T6237] __nla_validate_parse: 3 callbacks suppressed [ 105.903551][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 105.929839][ T6222] FAT-fs (loop1): Directory bread(block 36) failed [ 105.939036][ T6222] FAT-fs (loop1): Directory bread(block 37) failed [ 105.947199][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'. [ 105.960481][ T6222] FAT-fs (loop1): Directory bread(block 38) failed [ 106.084539][ T6240] siw: device registration error -23 [ 106.109660][ T6222] FAT-fs (loop1): Directory bread(block 39) failed [ 106.119754][ T6222] FAT-fs (loop1): Directory bread(block 40) failed [ 106.136654][ T6222] FAT-fs (loop1): Directory bread(block 41) failed [ 106.199120][ T29] audit: type=1400 audit(1753655055.689:9637): avc: denied { bind } for pid=6243 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.219718][ T29] audit: type=1400 audit(1753655055.689:9638): avc: denied { setopt } for pid=6243 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.349743][ T6222] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 106.357355][ T6222] FAT-fs (loop1): Filesystem has been set read-only [ 106.427430][ T6251] $H: renamed from bond0 [ 106.433487][ T6251] $H: entered promiscuous mode [ 106.464164][ T29] audit: type=1400 audit(1753655055.959:9639): avc: denied { listen } for pid=6250 comm="syz.4.643" path=2F3132302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 106.559502][ T6252] lo speed is unknown, defaulting to 1000 [ 106.845716][ T29] audit: type=1400 audit(1753655056.339:9640): avc: denied { write } for pid=6254 comm="syz.1.644" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.491238][ T29] audit: type=1400 audit(1753655056.979:9641): avc: denied { getopt } for pid=6268 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.717216][ T29] audit: type=1400 audit(1753655057.089:9642): avc: denied { write } for pid=6268 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.407996][ T6280] netlink: 'syz.1.649': attribute type 8 has an invalid length. [ 108.432701][ T6258] lo speed is unknown, defaulting to 1000 [ 108.454199][ T6280] loop1: detected capacity change from 0 to 512 [ 108.479871][ T6282] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.651'. [ 108.493404][ T6282] netlink: zone id is out of range [ 108.500256][ T6282] netlink: zone id is out of range [ 108.505735][ T6280] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.521889][ T6282] netlink: del zone limit has 8 unknown bytes [ 108.528997][ T6280] EXT4-fs (loop1): mount failed [ 108.749704][ T6280] loop1: detected capacity change from 0 to 1024 [ 108.764501][ T6280] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.775576][ T6280] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 108.786384][ T6280] JBD2: no valid journal superblock found [ 108.792303][ T6280] EXT4-fs (loop1): Could not load journal inode [ 108.850844][ T6298] 9pnet_virtio: no channels available for device syz [ 109.739765][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 109.965819][ T6320] lo speed is unknown, defaulting to 1000 [ 110.012881][ T6323] siw: device registration error -23 [ 110.036437][ T6331] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 110.166325][ T6331] lo speed is unknown, defaulting to 1000 [ 110.247386][ T6332] loop1: detected capacity change from 0 to 4096 [ 110.290018][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.531034][ T6327] EXT4-fs (loop1): shut down requested (2) [ 110.537144][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 110.537157][ T29] audit: type=1400 audit(1753655060.029:9938): avc: denied { ioctl } for pid=6324 comm="syz.1.664" path="/129/file1/file1" dev="loop1" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.842012][ T29] audit: type=1400 audit(1753655060.069:9939): avc: denied { read } for pid=2978 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 110.864829][ T29] audit: type=1400 audit(1753655060.069:9940): avc: denied { search } for pid=2978 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.886512][ T29] audit: type=1400 audit(1753655060.069:9941): avc: denied { search } for pid=2978 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.908831][ T29] audit: type=1400 audit(1753655060.069:9942): avc: denied { add_name } for pid=2978 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.930566][ T29] audit: type=1400 audit(1753655060.069:9943): avc: denied { create } for pid=2978 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.951427][ T29] audit: type=1400 audit(1753655060.069:9944): avc: denied { append open } for pid=2978 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.975169][ T29] audit: type=1400 audit(1753655060.069:9945): avc: denied { getattr } for pid=2978 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.257504][ T6343] loop4: detected capacity change from 0 to 512 [ 111.264585][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.277957][ T6343] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.671: bad orphan inode 15 [ 111.355066][ T6350] loop1: detected capacity change from 0 to 128 [ 111.374907][ T6343] ext4_test_bit(bit=14, block=5) = 0 [ 111.402684][ T6350] vfat: Unknown parameter '$' [ 111.426460][ T6343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.475147][ T6345] tipc: Resetting bearer [ 111.487566][ T6343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.516093][ T6345] wg2: left promiscuous mode [ 111.521648][ T6345] wg2: left allmulticast mode [ 111.553778][ T29] audit: type=1400 audit(1753655061.049:9946): avc: denied { write } for pid=6355 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.573263][ T29] audit: type=1400 audit(1753655061.049:9947): avc: denied { write } for pid=6355 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.599046][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 111.806443][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'. [ 111.807004][ T6364] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.281264][ T6383] loop4: detected capacity change from 0 to 8192 [ 112.290372][ T6383] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 112.324239][ T6383] netlink: 'syz.4.680': attribute type 3 has an invalid length. [ 112.332114][ T6383] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 112.343076][ T6385] sit0: left allmulticast mode [ 112.364585][ T6385] tipc: Resetting bearer [ 112.450556][ T6385] vlan0: left promiscuous mode [ 112.470496][ T6385] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.479835][ T6385] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.488184][ T6385] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.496551][ T6385] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.630251][ T6389] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 112.638493][ T6389] netlink: 100 bytes leftover after parsing attributes in process `syz.4.682'. [ 112.697839][ T6391] lo speed is unknown, defaulting to 1000 [ 112.780819][ T6399] netlink: 'syz.4.685': attribute type 46 has an invalid length. [ 112.791032][ T6399] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.806283][ T6399] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 112.814043][ T6399] netlink: 224 bytes leftover after parsing attributes in process `syz.4.685'. [ 112.875065][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 113.323900][ T6407] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 113.653747][ T6419] syz_tun: entered allmulticast mode [ 113.679999][ T6418] syz_tun: left allmulticast mode [ 113.960497][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 113.999548][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 114.120704][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 114.141475][ T6440] 9pnet_fd: Insufficient options for proto=fd [ 114.221361][ T6450] loop1: detected capacity change from 0 to 1024 [ 114.253601][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.277306][ T6448] infiniband syz2: set down [ 114.282635][ T6448] infiniband syz2: added veth0_to_bond [ 114.312199][ T6450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.335278][ T6448] RDS/IB: syz2: added [ 114.340142][ T6448] smc: adding ib device syz2 with port count 1 [ 114.346467][ T6448] smc: ib device syz2 port 1 has pnetid [ 114.355456][ T6459] lo: entered promiscuous mode [ 114.360481][ T6459] tunl0: entered promiscuous mode [ 114.365667][ T6459] gre0: entered promiscuous mode [ 114.370790][ T6459] gretap0: entered promiscuous mode [ 114.376104][ T6459] erspan0: entered promiscuous mode [ 114.381772][ T6459] ip_vti0: entered promiscuous mode [ 114.387104][ T6459] ip6_vti0: entered promiscuous mode [ 114.392674][ T6459] sit0: entered promiscuous mode [ 114.397698][ T6459] ip6tnl0: entered promiscuous mode [ 114.403066][ T6459] ip6gre0: entered promiscuous mode [ 114.408387][ T6459] syz_tun: entered promiscuous mode [ 114.413724][ T6459] ip6gretap0: entered promiscuous mode [ 114.419395][ T6459] bridge0: entered promiscuous mode [ 114.424823][ T6459] vcan0: entered promiscuous mode [ 114.430087][ T6459] team0: entered promiscuous mode [ 114.435415][ T6459] nlmon0: entered promiscuous mode [ 114.440701][ T6459] caif0: entered promiscuous mode [ 114.445906][ T6459] batadv0: entered promiscuous mode [ 114.451406][ T6459] vxcan0: entered promiscuous mode [ 114.456681][ T6459] vxcan1: entered promiscuous mode [ 114.461862][ T6459] veth0: entered promiscuous mode [ 114.467069][ T6459] veth1: entered promiscuous mode [ 114.472243][ T6459] wg0: entered promiscuous mode [ 114.477218][ T6459] wg1: entered promiscuous mode [ 114.482247][ T6459] wg2: entered promiscuous mode [ 114.487214][ T6459] veth0_to_bridge: entered promiscuous mode [ 114.493283][ T6459] bridge_slave_0: entered promiscuous mode [ 114.499515][ T6459] veth1_to_bridge: entered promiscuous mode [ 114.505555][ T6459] bridge_slave_1: entered promiscuous mode [ 114.511463][ T6459] veth0_to_bond: entered promiscuous mode [ 114.517266][ T6459] bond_slave_0: entered promiscuous mode [ 114.522983][ T6459] veth1_to_bond: entered promiscuous mode [ 114.528801][ T6459] bond_slave_1: entered promiscuous mode [ 114.534595][ T6459] veth0_to_team: entered promiscuous mode [ 114.540420][ T6459] team_slave_0: entered promiscuous mode [ 114.546152][ T6459] veth1_to_team: entered promiscuous mode [ 114.552015][ T6459] team_slave_1: entered promiscuous mode [ 114.557869][ T6459] veth0_to_batadv: entered promiscuous mode [ 114.563932][ T6459] batadv_slave_0: entered promiscuous mode [ 114.569963][ T6459] veth1_to_batadv: entered promiscuous mode [ 114.575990][ T6459] batadv_slave_1: entered promiscuous mode [ 114.582018][ T6459] xfrm0: entered promiscuous mode [ 114.587129][ T6459] veth0_to_hsr: entered promiscuous mode [ 114.592926][ T6459] veth1_to_hsr: entered promiscuous mode [ 114.599269][ T6459] hsr0: entered promiscuous mode [ 114.604290][ T6459] veth1_virt_wifi: entered promiscuous mode [ 114.610290][ T6459] veth0_virt_wifi: entered promiscuous mode [ 114.616619][ T6459] vlan1: entered promiscuous mode [ 114.621788][ T6459] macvlan0: entered promiscuous mode [ 114.627270][ T6459] macvlan1: entered promiscuous mode [ 114.632807][ T6459] ipvlan0: entered promiscuous mode [ 114.638098][ T6459] ipvlan1: entered promiscuous mode [ 114.643426][ T6459] geneve0: entered promiscuous mode [ 114.648923][ T6459] geneve1: entered promiscuous mode [ 114.654255][ T6459] pim6reg: entered promiscuous mode [ 114.659636][ T6459] team0.1: entered promiscuous mode [ 114.665115][ T6459] netdevsim netdevsim2 eth0: entered promiscuous mode [ 114.672780][ T6459] netdevsim netdevsim2 eth1: entered promiscuous mode [ 114.679786][ T6459] netdevsim netdevsim2 eth2: entered promiscuous mode [ 114.686747][ T6459] netdevsim netdevsim2 eth3: entered promiscuous mode [ 114.693626][ T6459] bridge1: entered promiscuous mode [ 114.699580][ T6459] vxlan0: entered promiscuous mode [ 114.740707][ T6450] SELinux: Context system_u:object is not valid (left unmapped). [ 114.764487][ T6458] tipc: New replicast peer: 255.255.255.255 [ 114.771254][ T6458] tipc: Enabled bearer , priority 10 [ 114.818271][ T6469] bridge0: port 2(batadv1) entered blocking state [ 114.824778][ T6469] bridge0: port 2(batadv1) entered disabled state [ 114.832060][ T6469] batadv1: entered allmulticast mode [ 114.838228][ T6469] batadv1: entered promiscuous mode [ 114.845622][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 115.070728][ T6479] loop4: detected capacity change from 0 to 128 [ 115.096072][ T6479] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.110308][ T6479] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.152245][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'. [ 115.182191][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.303241][ T6486] loop4: detected capacity change from 0 to 1024 [ 115.319856][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 115.329154][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 115.354027][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.404331][ T6486] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 115.747860][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 115.747877][ T29] audit: type=1326 audit(1753655065.239:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.777641][ T29] audit: type=1326 audit(1753655065.239:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.801064][ T29] audit: type=1326 audit(1753655065.239:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.824935][ T29] audit: type=1326 audit(1753655065.239:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.848434][ T29] audit: type=1326 audit(1753655065.239:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.871918][ T29] audit: type=1326 audit(1753655065.239:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.895371][ T29] audit: type=1326 audit(1753655065.239:10372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.919010][ T29] audit: type=1326 audit(1753655065.239:10373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.942564][ T29] audit: type=1326 audit(1753655065.239:10374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 115.965988][ T29] audit: type=1326 audit(1753655065.239:10375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 116.074689][ T6498] loop1: detected capacity change from 0 to 164 [ 116.103722][ T6498] syz.1.713: attempt to access beyond end of device [ 116.103722][ T6498] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.117669][ T6498] syz.1.713: attempt to access beyond end of device [ 116.117669][ T6498] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.147175][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.157499][ T6501] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 116.257028][ T6507] netlink: 'syz.4.715': attribute type 8 has an invalid length. [ 116.266565][ T6512] atomic_op ffff88811a972928 conn xmit_atomic 0000000000000000 [ 116.284681][ T6509] loop1: detected capacity change from 0 to 512 [ 116.293686][ T6507] loop4: detected capacity change from 0 to 512 [ 116.302745][ T6509] EXT4-fs: Ignoring removed oldalloc option [ 116.308825][ T6509] EXT4-fs: inline encryption not supported [ 116.314747][ T6509] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.332516][ T6509] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.349224][ T6507] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.364912][ T6507] EXT4-fs (loop4): mount failed [ 116.372147][ T6509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.718: bg 0: block 64: padding at end of block bitmap is not set [ 116.394243][ T6509] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.718: Failed to acquire dquot type 0 [ 116.405958][ T6509] EXT4-fs (loop1): 1 truncate cleaned up [ 116.412170][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.441013][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.474086][ T6525] loop4: detected capacity change from 0 to 1024 [ 116.499877][ T6525] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.510826][ T6525] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.544386][ T6525] JBD2: no valid journal superblock found [ 116.550855][ T6525] EXT4-fs (loop4): Could not load journal inode [ 116.638634][ T6517] __nla_validate_parse: 2 callbacks suppressed [ 116.638651][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 116.945112][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 117.009888][ T6549] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.231032][ T6559] loop4: detected capacity change from 0 to 164 [ 117.243358][ T6559] {: attempt to access beyond end of device [ 117.243358][ T6559] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 117.256571][ T6559] {: attempt to access beyond end of device [ 117.256571][ T6559] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 117.271893][ T6559] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 117.314963][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 117.323854][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 117.608084][ T6568] lo speed is unknown, defaulting to 1000 [ 117.710984][ T6573] 9pnet_virtio: no channels available for device syz [ 118.116876][ T6581] loop1: detected capacity change from 0 to 1024 [ 118.141994][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.257281][ T6581] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.277480][ T6581] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 118.295988][ T6581] EXT4-fs (loop1): Remounting filesystem read-only [ 118.553516][ T4358] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 118.574681][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 118.583530][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 118.592349][ T6588] netlink: 'syz.0.738': attribute type 6 has an invalid length. [ 118.736878][ T6581] wޣ (6581) used greatest stack depth: 9080 bytes left [ 118.747025][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.810474][ T6598] SELinux: syz.1.742 (6598) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.982917][ T6608] loop4: detected capacity change from 0 to 1024 [ 119.028662][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.060240][ T6608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.580700][ T6626] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 120.374907][ T6606] lo speed is unknown, defaulting to 1000 [ 120.635442][ T6643] 9pnet: Could not find request transport: 0xffffffffffffffff [ 121.296943][ T6648] lo speed is unknown, defaulting to 1000 [ 121.703277][ T6661] 9pnet_virtio: no channels available for device syz [ 121.936994][ T6663] lo speed is unknown, defaulting to 1000 [ 123.275842][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 123.275862][ T29] audit: type=1400 audit(1753655072.759:10880): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 123.317617][ T6648] uprobe: syz.3.750:6648 failed to unregister, leaking uprobe [ 123.476948][ T6678] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.487822][ T29] audit: type=1400 audit(1753655072.969:10881): avc: denied { ioctl } for pid=6677 comm="syz.4.760" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.513158][ T29] audit: type=1326 audit(1753655072.979:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.536643][ T29] audit: type=1326 audit(1753655072.979:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.560054][ T29] audit: type=1326 audit(1753655072.979:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.583538][ T29] audit: type=1326 audit(1753655072.979:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.606981][ T29] audit: type=1326 audit(1753655072.979:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.630457][ T29] audit: type=1326 audit(1753655072.979:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.653806][ T29] audit: type=1326 audit(1753655072.979:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.677213][ T29] audit: type=1326 audit(1753655072.979:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 123.688944][ T6678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.785078][ T6672] Set syz1 is full, maxelem 65536 reached [ 123.844421][ T6678] siw: device registration error -23 [ 123.883353][ T6672] netlink: 27 bytes leftover after parsing attributes in process `syz.2.758'. [ 123.917907][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.771'. [ 123.921984][ T6687] SELinux: syz.4.761 (6687) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 124.018611][ T10] IPVS: starting estimator thread 0... [ 124.022803][ T6689] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 124.132603][ T6690] IPVS: using max 2784 ests per chain, 139200 per kthread [ 124.193710][ T6693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 124.202694][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.762'. [ 124.212217][ T6693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 124.260062][ T6693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 124.510486][ T6701] 9pnet: Could not find request transport: 0xffffffffffffffff [ 125.066915][ T6716] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.232619][ T6719] loop4: detected capacity change from 0 to 512 [ 125.240027][ T6719] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.246536][ T6719] EXT4-fs: Ignoring removed bh option [ 125.257884][ T6719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.282921][ T6719] EXT4-fs (loop4): 1 truncate cleaned up [ 125.290251][ T6719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.416006][ T6723] loop1: detected capacity change from 0 to 128 [ 125.483492][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'. [ 126.201008][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.275731][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 126.352601][ T6734] loop4: detected capacity change from 0 to 512 [ 126.382523][ T6734] EXT4-fs (loop4): too many log groups per flexible block group [ 126.390370][ T6734] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 126.431089][ T6734] EXT4-fs (loop4): mount failed [ 126.491524][ T6741] loop1: detected capacity change from 0 to 512 [ 126.499530][ T6741] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 126.511277][ T6741] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.518517][ T6741] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.776: Block bitmap for bg 0 marked uninitialized [ 126.534491][ T6741] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 126.544836][ T6741] EXT4-fs (loop1): 1 orphan inode deleted [ 126.553436][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.572773][ T6741] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 126.583284][ T6741] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 126.619084][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.236015][ T6754] netlink: 36 bytes leftover after parsing attributes in process `syz.3.779'. [ 127.244962][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.779'. [ 127.269027][ T6753] lo speed is unknown, defaulting to 1000 [ 127.318103][ T6759] 9pnet: Could not find request transport: 0xffffffffffffffff [ 127.409093][ T6766] loop4: detected capacity change from 0 to 128 [ 127.511945][ T6766] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.524098][ T6766] syz.4.784: attempt to access beyond end of device [ 127.524098][ T6766] loop4: rw=2049, sector=145, nr_sectors = 160 limit=128 [ 127.538308][ T6766] syz.4.784: attempt to access beyond end of device [ 127.538308][ T6766] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 127.552657][ T6766] syz.4.784: attempt to access beyond end of device [ 127.552657][ T6766] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 127.566424][ T6766] syz.4.784: attempt to access beyond end of device [ 127.566424][ T6766] loop4: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 127.581723][ T6766] syz.4.784: attempt to access beyond end of device [ 127.581723][ T6766] loop4: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 127.595541][ T6766] syz.4.784: attempt to access beyond end of device [ 127.595541][ T6766] loop4: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 127.609716][ T6766] syz.4.784: attempt to access beyond end of device [ 127.609716][ T6766] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 127.623581][ T6766] syz.4.784: attempt to access beyond end of device [ 127.623581][ T6766] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 127.637166][ T6766] syz.4.784: attempt to access beyond end of device [ 127.637166][ T6766] loop4: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 127.651595][ T6766] syz.4.784: attempt to access beyond end of device [ 127.651595][ T6766] loop4: rw=2049, sector=441, nr_sectors = 8 limit=128 [ 127.715103][ T6774] pimreg: entered allmulticast mode [ 127.736361][ T6774] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 127.746261][ T6774] team0: Port device dummy0 added [ 127.753179][ T6774] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 127.762943][ T6774] team0: Port device dummy0 removed [ 127.770374][ T6774] dummy0: entered promiscuous mode [ 127.776642][ T6774] $H: (slave dummy0): Enslaving as an active interface with an up link [ 127.786493][ T6774] pimreg: left allmulticast mode [ 127.794944][ T6763] lo speed is unknown, defaulting to 1000 [ 127.979665][ T6778] Falling back ldisc for ttyS3. [ 128.056942][ T6783] lo speed is unknown, defaulting to 1000 [ 128.064304][ T6785] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 128.082888][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.115237][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.122516][ T6785] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.135089][ T6785] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 128.158683][ T6789] gretap1: entered promiscuous mode [ 128.166420][ T6789] bond0: (slave gretap1): making interface the new active one [ 128.175499][ T6789] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 128.192263][ T6785] macvlan2: entered promiscuous mode [ 128.197626][ T6785] macvlan2: entered allmulticast mode [ 128.203474][ T6785] bond0: entered promiscuous mode [ 128.208909][ T6785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.217976][ T6785] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 128.229809][ T6785] bond0: left promiscuous mode [ 128.612796][ T6796] siw: device registration error -23 [ 128.676240][ T6796] lo speed is unknown, defaulting to 1000 [ 129.592885][ T6803] __nla_validate_parse: 2 callbacks suppressed [ 129.592903][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 129.942881][ T6811] loop4: detected capacity change from 0 to 256 [ 129.986372][ T6804] lo speed is unknown, defaulting to 1000 [ 130.208836][ T6820] lo speed is unknown, defaulting to 1000 [ 130.374193][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.799'. [ 130.383137][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 130.392083][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.799'. [ 130.440559][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.799'. [ 130.453923][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 130.453936][ T29] audit: type=1326 audit(1753655079.949:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.484225][ T29] audit: type=1326 audit(1753655079.949:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.494334][ T6827] lo speed is unknown, defaulting to 1000 [ 130.508287][ T29] audit: type=1326 audit(1753655079.949:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.544256][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.800'. [ 130.593417][ T29] audit: type=1326 audit(1753655080.039:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.617742][ T29] audit: type=1326 audit(1753655080.039:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.641375][ T29] audit: type=1326 audit(1753655080.039:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 130.665445][ T29] audit: type=1326 audit(1753655080.049:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 130.688904][ T29] audit: type=1326 audit(1753655080.049:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 130.698373][ T6837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 130.712981][ T29] audit: type=1326 audit(1753655080.049:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 130.721219][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.803'. [ 130.745311][ T29] audit: type=1326 audit(1753655080.049:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3e0e9a9 code=0x7ffc0000 [ 130.753606][ T6837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 130.791917][ T6841] : port 1(ip6gretap0) entered blocking state [ 130.798513][ T6841] : port 1(ip6gretap0) entered disabled state [ 130.810188][ T6837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 130.825240][ T6841] ip6gretap0: entered allmulticast mode [ 130.844209][ T6841] ip6gretap0: entered promiscuous mode [ 130.864598][ T6835] netlink: 'syz.3.802': attribute type 13 has an invalid length. [ 130.872468][ T6835] netlink: 'syz.3.802': attribute type 17 has an invalid length. [ 130.893438][ T6835] 8021q: adding VLAN 0 to HW filter on device $H [ 130.901852][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.909392][ T6835] tipc: Resetting bearer [ 130.915581][ T6835] tipc: Resetting bearer [ 130.921511][ T6835] bridge0: port 1(dummy0) entered blocking state [ 130.927987][ T6835] bridge0: port 1(dummy0) entered forwarding state [ 130.937994][ T6835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.261398][ T6853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.497945][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 131.504610][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.512909][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 131.647330][ T6862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.655139][ T6861] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 131.662024][ T6861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.670197][ T6861] vhci_hcd vhci_hcd.0: Device attached [ 131.676301][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 131.682965][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.690586][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 131.719974][ T6856] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.790531][ T6862] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 131.797174][ T6862] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.804857][ T6862] vhci_hcd vhci_hcd.0: Device attached [ 131.811569][ T6861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.834364][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(25) [ 131.841198][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.848870][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 131.856798][ T6861] vhci_hcd vhci_hcd.0: port 0 already used [ 131.884595][ T6871] vhci_hcd: connection closed [ 131.884765][ T12] vhci_hcd: stop threads [ 131.885208][ T6864] vhci_hcd: connection closed [ 131.889498][ T12] vhci_hcd: release socket [ 131.894346][ T6868] vhci_hcd: connection closed [ 131.898543][ T12] vhci_hcd: disconnect device [ 131.903965][ T6859] vhci_hcd: connection closed [ 131.910874][ T6863] vhci_hcd: connection closed [ 131.922423][ T12] vhci_hcd: stop threads [ 131.931450][ T12] vhci_hcd: release socket [ 131.935945][ T12] vhci_hcd: disconnect device [ 131.942129][ T12] vhci_hcd: stop threads [ 131.946389][ T12] vhci_hcd: release socket [ 131.950906][ T12] vhci_hcd: disconnect device [ 131.956099][ T12] vhci_hcd: stop threads [ 131.960405][ T12] vhci_hcd: release socket [ 131.964981][ T12] vhci_hcd: disconnect device [ 131.971271][ T12] vhci_hcd: stop threads [ 131.975602][ T12] vhci_hcd: release socket [ 131.980088][ T12] vhci_hcd: disconnect device [ 132.154784][ T6895] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 132.273766][ T6896] netlink: 'syz.1.816': attribute type 27 has an invalid length. [ 132.294798][ T6896] $H: left promiscuous mode [ 132.299622][ T6896] bond_slave_0: left promiscuous mode [ 132.305757][ T6896] bond_slave_1: left promiscuous mode [ 132.316543][ T5903] lo speed is unknown, defaulting to 1000 [ 132.322316][ T5903] syz0: Port: 1 Link DOWN [ 132.369597][ T6896] 8021q: adding VLAN 0 to HW filter on device $H [ 132.380311][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.392034][ T6896] bridge0: port 3(dummy0) entered blocking state [ 132.398892][ T6896] bridge0: port 3(dummy0) entered forwarding state [ 132.424026][ T6896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.443011][ T5903] lo speed is unknown, defaulting to 1000 [ 132.448758][ T5903] syz0: Port: 1 Link ACTIVE [ 132.455309][ T5907] syz1: Port: 1 Link ACTIVE [ 132.569389][ T6906] program syz.4.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.587642][ T6906] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.156383][ T6924] openvswitch: netlink: Message has 6 unknown bytes. [ 133.306794][ T6922] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 133.589234][ T6943] loop4: detected capacity change from 0 to 512 [ 134.569366][ T6943] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.827: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 134.613911][ T6943] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.827: Bad quota inode: 3, type: 0 [ 134.632896][ T6943] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 134.668935][ T6943] EXT4-fs (loop4): mount failed [ 134.707634][ T6965] __nla_validate_parse: 12 callbacks suppressed [ 134.707647][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 134.722897][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 134.732389][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 134.781598][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 134.905606][ T6964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.830'. [ 134.959149][ T6972] loop4: detected capacity change from 0 to 2048 [ 135.006038][ T6972] loop4: p1 < > p4 [ 135.011100][ T6972] loop4: p4 size 8388608 extends beyond EOD, truncated [ 135.061511][ T6972] $H: (slave dummy0): Releasing backup interface [ 135.081016][ T6972] dummy0: left promiscuous mode [ 135.099830][ T6972] batman_adv: batadv0: Adding interface: dummy0 [ 135.106171][ T6972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.131544][ T6972] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 135.158304][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 135.158317][ T29] audit: type=1326 audit(1753655084.985:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6971 comm="syz.4.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 135.188777][ T29] audit: type=1326 audit(1753655084.985:11606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6971 comm="syz.4.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 135.231247][ T29] audit: type=1326 audit(1753655085.071:11607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.256458][ T29] audit: type=1326 audit(1753655085.082:11608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.267832][ T3547] udevd[3547]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 135.280478][ T29] audit: type=1326 audit(1753655085.082:11609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.313650][ T29] audit: type=1326 audit(1753655085.082:11610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.339235][ T29] audit: type=1400 audit(1753655085.178:11611): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 135.360037][ T29] audit: type=1326 audit(1753655085.178:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.383462][ T29] audit: type=1326 audit(1753655085.178:11613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.407517][ T29] audit: type=1326 audit(1753655085.178:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5354ce9a9 code=0x7ffc0000 [ 135.476598][ T6981] loop4: detected capacity change from 0 to 1024 [ 135.496099][ T6981] ext4: Unknown parameter 'euid>00000000000000000000' [ 135.519134][ T6981] Cannot find del_set index 4 as target [ 135.630898][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.838'. [ 135.639817][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.838'. [ 135.648726][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.838'. [ 135.669512][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.838'. [ 135.776693][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 135.805939][ T6990] xt_CT: No such helper "pptp" [ 135.817036][ T6990] wireguard0: entered promiscuous mode [ 136.154444][ T7003] lo speed is unknown, defaulting to 1000 [ 137.132237][ T7031] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 137.298561][ T7043] loop4: detected capacity change from 0 to 128 [ 137.450510][ T7043] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.463470][ T7043] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.534190][ T7043] lo speed is unknown, defaulting to 1000 [ 138.044034][ T7057] loop1: detected capacity change from 0 to 128 [ 138.072809][ T7057] SELinux: security_context_str_to_sid (s\^(m`dR%]v;hfePiz׺+8x։?=MSg%אVDXڶ}Y_gWT~Lf00000000000000000000000Bx3!/ھ5;Y$]V1{ȉj+4bR}$PZh [ 138.072809][ T7057] ~~= Tݦ҃IUJ3bfAc@ u+INTT[M|zk@IQ1>dS IN'=Y^_G^1M@`aȥqxY_u\ [ 138.072809][ T7057]  [ 138.072809][ T7057] yҟvyhB/ P^i/ފ [ 138.072809][ T7057] Dlڰ{8AOIA:?v0'!ӜB8kp٫] ^6H76$+NJU#/Jm]UGꦴwM`Z^J*PqUdP}K5\a44 f9ݳ ~-V) failed with errno=-22 [ 138.201422][ T7061] netlink: 'syz.1.856': attribute type 27 has an invalid length. [ 138.237072][ T7061] bridge0: port 3(dummy0) entered disabled state [ 138.252162][ T5915] lo speed is unknown, defaulting to 1000 [ 138.258066][ T5915] syz0: Port: 1 Link DOWN [ 138.266282][ T5914] syz1: Port: 1 Link DOWN [ 138.406510][ T7067] wireguard0: entered promiscuous mode [ 138.412227][ T7067] wireguard0: entered allmulticast mode [ 138.587233][ T7074] bond1: entered promiscuous mode [ 138.592321][ T7074] bond1: entered allmulticast mode [ 138.598812][ T7074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.610475][ T7074] bond1 (unregistering): Released all slaves [ 139.004427][ T7081] netlink: 'syz.2.861': attribute type 13 has an invalid length. [ 139.027613][ T7081] 8021q: adding VLAN 0 to HW filter on device $H [ 139.036324][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.045573][ T7081] bridge0: port 1(dummy0) entered blocking state [ 139.051977][ T7081] bridge0: port 1(dummy0) entered forwarding state [ 139.097778][ T7081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.967621][ T7088] __nla_validate_parse: 18 callbacks suppressed [ 139.967696][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 139.983662][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 139.992597][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 140.001530][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 140.010387][ T7088] netlink: 'syz.2.864': attribute type 6 has an invalid length. [ 140.030426][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'. [ 140.041735][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 140.146119][ T7088] lo speed is unknown, defaulting to 1000 [ 140.301707][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 140.312280][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 140.746324][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 140.746338][ T29] audit: type=1326 audit(1753655090.972:11837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.776659][ T29] audit: type=1326 audit(1753655090.972:11838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.800166][ T29] audit: type=1326 audit(1753655090.972:11839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.824224][ T29] audit: type=1326 audit(1753655090.972:11840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.847676][ T29] audit: type=1326 audit(1753655090.972:11841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.871696][ T29] audit: type=1326 audit(1753655090.972:11842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.895095][ T29] audit: type=1326 audit(1753655090.972:11843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.919023][ T29] audit: type=1326 audit(1753655090.972:11844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.942564][ T29] audit: type=1326 audit(1753655090.972:11845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 140.966544][ T29] audit: type=1326 audit(1753655090.972:11846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f223be9a9 code=0x7ffc0000 [ 141.078916][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.168350][ T7105] tipc: New replicast peer: 255.255.255.255 [ 141.174552][ T7105] tipc: Enabled bearer , priority 10 [ 141.195518][ T7111] sch_fq: defrate 4294967295 ignored. [ 141.204572][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 141.221891][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'. [ 141.233747][ T7113] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 141.942499][ T7145] batadv_slave_1: entered promiscuous mode [ 142.049879][ T7149] batadv_slave_1: left promiscuous mode [ 142.206875][ T7151] loop4: detected capacity change from 0 to 164 [ 142.614882][ T7160] loop1: detected capacity change from 0 to 2048 [ 142.622692][ T7160] ext3: Unknown parameter 'obj_role' [ 142.805444][ T7160] 8021q: adding VLAN 0 to HW filter on device $H [ 143.641889][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.666419][ T7160] bridge0: port 3(dummy0) entered blocking state [ 143.672809][ T7160] bridge0: port 3(dummy0) entered forwarding state [ 143.684213][ T7160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.033684][ T5906] lo speed is unknown, defaulting to 1000 [ 144.039546][ T5906] syz0: Port: 1 Link ACTIVE [ 144.079301][ T7169] lo speed is unknown, defaulting to 1000 [ 144.236213][ T7176] lo speed is unknown, defaulting to 1000 [ 144.604664][ T7187] netlink: 'syz.1.893': attribute type 29 has an invalid length. [ 144.658708][ T5906] syz1: Port: 1 Link ACTIVE [ 144.905471][ T7181] __nla_validate_parse: 3 callbacks suppressed [ 144.905503][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 145.004667][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 145.048367][ T7203] sch_fq: defrate 4294967295 ignored. [ 145.054384][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 145.099264][ T7191] loop1: detected capacity change from 0 to 8192 [ 145.345187][ T7219] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 145.364718][ T7219] batman_adv: batadv0: Removing interface: dummy0 [ 145.377551][ T7219] team0: Port device dummy0 added [ 145.387326][ T7219] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 145.397653][ T7219] team0: Port device dummy0 removed [ 145.405968][ T7219] dummy0: entered promiscuous mode [ 145.411941][ T7219] $H: (slave dummy0): Enslaving as an active interface with an up link [ 145.422300][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 145.422385][ T29] audit: type=1400 audit(1753655096.004:12216): avc: denied { create } for pid=7221 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.486636][ T29] audit: type=1400 audit(1753655096.047:12217): avc: denied { read } for pid=7217 comm="syz.4.899" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.507875][ T29] audit: type=1400 audit(1753655096.047:12218): avc: denied { open } for pid=7217 comm="syz.4.899" path="net:[4026532627]" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.531347][ T29] audit: type=1400 audit(1753655096.047:12219): avc: denied { create } for pid=7217 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.551363][ T29] audit: type=1400 audit(1753655096.047:12220): avc: denied { bind } for pid=7217 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.571163][ T29] audit: type=1400 audit(1753655096.058:12221): avc: denied { setopt } for pid=7217 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.596867][ T29] audit: type=1400 audit(1753655096.122:12222): avc: denied { read } for pid=7221 comm="syz.1.900" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.619889][ T29] audit: type=1400 audit(1753655096.122:12223): avc: denied { open } for pid=7221 comm="syz.1.900" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.643705][ T29] audit: type=1400 audit(1753655096.122:12224): avc: denied { create } for pid=7221 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.663495][ T29] audit: type=1400 audit(1753655096.122:12225): avc: denied { connect } for pid=7221 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.812186][ T7237] bridge0: port 4(batadv0) entered blocking state [ 145.818781][ T7237] bridge0: port 4(batadv0) entered disabled state [ 145.825579][ T7237] batadv0: entered allmulticast mode [ 145.833172][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 145.845761][ T7237] batadv0: entered promiscuous mode [ 145.867799][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 145.888576][ T7237] batadv0 (unregistering): left allmulticast mode [ 145.895139][ T7237] batadv0 (unregistering): left promiscuous mode [ 145.901514][ T7237] bridge0: port 4(batadv0) entered disabled state [ 145.971737][ T7245] loop1: detected capacity change from 0 to 512 [ 145.980849][ T7245] EXT4-fs: Ignoring removed i_version option [ 145.995869][ T7245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.023192][ T7245] EXT4-fs (loop1): 1 truncate cleaned up [ 146.033338][ T7245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.171010][ T7259] netlink: 'wޣ': attribute type 21 has an invalid length. [ 146.178630][ T7259] netlink: 132 bytes leftover after parsing attributes in process `wޣ'. [ 146.187424][ T7259] netlink: 'wޣ': attribute type 1 has an invalid length. [ 146.218297][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 146.227878][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 146.332926][ T7264] lo speed is unknown, defaulting to 1000 [ 146.560599][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.636381][ T7269] vlan0: entered promiscuous mode [ 146.641517][ T7269] bridge0: entered promiscuous mode [ 146.647101][ T7269] vlan0: entered allmulticast mode [ 146.652292][ T7269] bridge0: entered allmulticast mode [ 146.679394][ T7269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 146.848349][ T7274] 9pnet: Could not find request transport: rmx [ 146.958969][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 147.199384][ T7291] lo speed is unknown, defaulting to 1000 [ 147.604095][ T7295] futex_wake_op: syz.1.919 tries to shift op by 144; fix this program [ 148.508321][ T7317] lo speed is unknown, defaulting to 1000 [ 148.962506][ T7324] wg2: entered promiscuous mode [ 148.967402][ T7324] wg2: entered allmulticast mode [ 149.053307][ T7324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7324 comm=syz.0.924 [ 149.065880][ T7324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7324 comm=syz.0.924 [ 149.080114][ T7328] openvswitch: netlink: Message has 6 unknown bytes. [ 149.127574][ T7328] loop4: detected capacity change from 0 to 512 [ 149.183187][ T7328] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 149.250909][ T7328] EXT4-fs (loop4): invalid journal inode [ 149.391336][ T7333] loop1: detected capacity change from 0 to 512 [ 149.516828][ T7346] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 149.760735][ T7346] lo speed is unknown, defaulting to 1000 [ 150.336753][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 150.336800][ T29] audit: type=1400 audit(1753655100.886:12469): avc: denied { associate } for pid=7352 comm="syz.3.926" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 150.383327][ T7334] lo speed is unknown, defaulting to 1000 [ 150.478036][ T7357] __nla_validate_parse: 7 callbacks suppressed [ 150.478053][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 150.525727][ T29] audit: type=1400 audit(1753655101.476:12470): avc: denied { write } for pid=7354 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.640277][ T29] audit: type=1400 audit(1753655101.508:12471): avc: denied { execute } for pid=7356 comm="syz.0.933" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.661445][ T29] audit: type=1400 audit(1753655101.508:12472): avc: denied { execute_no_trans } for pid=7356 comm="syz.0.933" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.694375][ T29] audit: type=1400 audit(1753655101.562:12473): avc: denied { read } for pid=7354 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.777392][ T29] audit: type=1326 audit(1753655101.733:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 150.800887][ T29] audit: type=1326 audit(1753655101.733:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3dafe9a9 code=0x7ffc0000 [ 150.992874][ T7371] lo speed is unknown, defaulting to 1000 [ 151.319860][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 151.628811][ T7348] audit: audit_backlog=66 > audit_backlog_limit=64 [ 151.635542][ T7348] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 151.643422][ T7348] audit: backlog limit exceeded [ 151.683861][ T7388] SELinux: Context  is not valid (left unmapped). [ 151.694213][ T7388] loop4: detected capacity change from 0 to 256 [ 151.718692][ T7388] FAT-fs (loop4): codepage cp865 not found [ 152.068198][ T7396] loop4: detected capacity change from 0 to 8192 [ 152.157533][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 152.166436][ T7407] netlink: 2 bytes leftover after parsing attributes in process `syz.2.938'. [ 152.215647][ T7407] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.224047][ T7407] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.232261][ T7407] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.240570][ T7407] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.253445][ T7407] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.261986][ T7407] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.270530][ T7407] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.279052][ T7407] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.423817][ T7420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.944'. [ 152.432877][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'. [ 152.441948][ T7420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.944'. [ 152.451695][ T7420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.944'. [ 152.613339][ T7425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43823 sclass=netlink_audit_socket pid=7425 comm=syz.2.948 [ 152.637411][ T7425] netlink: 'syz.2.948': attribute type 3 has an invalid length. [ 152.669809][ T7427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7427 comm=syz.2.949 [ 152.951858][ T7440] wg2: entered promiscuous mode [ 152.957198][ T7440] wg2: entered allmulticast mode [ 152.964857][ T7442] netlink: 'syz.2.956': attribute type 21 has an invalid length. [ 152.973244][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 153.013349][ T7440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7440 comm=syz.3.955 [ 153.025924][ T7440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7440 comm=syz.3.955 [ 153.036730][ T7444] unsupported nla_type 52263 [ 153.064259][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 153.130617][ T7444] lo speed is unknown, defaulting to 1000 [ 153.173786][ T7454] loop1: detected capacity change from 0 to 512 [ 153.182377][ T7454] EXT4-fs: Ignoring removed orlov option [ 153.188555][ T7454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.210116][ T7454] ext4: Unknown parameter 'fsname' [ 153.226566][ T7456] loop4: detected capacity change from 0 to 512 [ 153.256687][ T7456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.269966][ T7460] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.590407][ T7471] $H (unregistering): Released all slaves [ 153.773917][ T7481] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.856809][ T7466] ================================================================== [ 153.864933][ T7466] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 153.872227][ T7466] [ 153.874543][ T7466] write to 0xffff888106f36dfc of 4 bytes by task 7470 on cpu 0: [ 153.882160][ T7466] __xa_set_mark+0x172/0x1a0 [ 153.886744][ T7466] __folio_mark_dirty+0x3af/0x4d0 [ 153.891764][ T7466] mark_buffer_dirty+0x11e/0x210 [ 153.896699][ T7466] block_write_end+0x12e/0x210 [ 153.901470][ T7466] ext4_write_end+0x13a/0x730 [ 153.906142][ T7466] ext4_da_write_end+0x70/0x810 [ 153.911011][ T7466] generic_perform_write+0x312/0x490 [ 153.916288][ T7466] ext4_buffered_write_iter+0x1ee/0x3c0 [ 153.921827][ T7466] ext4_file_write_iter+0x383/0xf00 [ 153.927016][ T7466] iter_file_splice_write+0x5ef/0x970 [ 153.932399][ T7466] direct_splice_actor+0x153/0x2a0 [ 153.937519][ T7466] splice_direct_to_actor+0x30f/0x680 [ 153.942993][ T7466] do_splice_direct+0xda/0x150 [ 153.947766][ T7466] do_sendfile+0x380/0x650 [ 153.952175][ T7466] __x64_sys_sendfile64+0x105/0x150 [ 153.957366][ T7466] x64_sys_call+0xb39/0x2fb0 [ 153.961947][ T7466] do_syscall_64+0xd2/0x200 [ 153.966457][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.972350][ T7466] [ 153.974660][ T7466] read to 0xffff888106f36dfc of 4 bytes by task 7466 on cpu 1: [ 153.982544][ T7466] xas_find_marked+0x5dc/0x620 [ 153.987297][ T7466] find_get_entry+0x5d/0x380 [ 153.991888][ T7466] filemap_get_folios_tag+0x92/0x210 [ 153.997175][ T7466] filemap_fdatawait_range+0x88/0x1d0 [ 154.002555][ T7466] __writeback_single_inode+0xdb/0x7c0 [ 154.008053][ T7466] writeback_single_inode+0x167/0x3e0 [ 154.013424][ T7466] sync_inode_metadata+0x5b/0x90 [ 154.018352][ T7466] generic_buffers_fsync_noflush+0xd9/0x120 [ 154.024247][ T7466] ext4_sync_file+0x1ab/0x690 [ 154.028920][ T7466] vfs_fsync_range+0x10a/0x130 [ 154.033682][ T7466] ext4_buffered_write_iter+0x34f/0x3c0 [ 154.039222][ T7466] ext4_file_write_iter+0xdbf/0xf00 [ 154.044411][ T7466] iter_file_splice_write+0x5ef/0x970 [ 154.049781][ T7466] direct_splice_actor+0x153/0x2a0 [ 154.054888][ T7466] splice_direct_to_actor+0x30f/0x680 [ 154.060257][ T7466] do_splice_direct+0xda/0x150 [ 154.065016][ T7466] do_sendfile+0x380/0x650 [ 154.069428][ T7466] __x64_sys_sendfile64+0x105/0x150 [ 154.074618][ T7466] x64_sys_call+0xb39/0x2fb0 [ 154.079206][ T7466] do_syscall_64+0xd2/0x200 [ 154.083698][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.089583][ T7466] [ 154.091898][ T7466] value changed: 0x04000021 -> 0x0e000021 [ 154.097597][ T7466] [ 154.099906][ T7466] Reported by Kernel Concurrency Sanitizer on: [ 154.106051][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.4.960 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 154.118370][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.128414][ T7466] ================================================================== [ 154.146259][ T7483] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.294405][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.314467][ T7484] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 154.333641][ T7483] lo speed is unknown, defaulting to 1000