last executing test programs: 2.258819323s ago: executing program 4 (id=966): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14127f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf7f, 0x401}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) syz_clone3(&(0x7f00000007c0)={0x20040100, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x1a}, &(0x7f0000000700)=""/179, 0xb3, &(0x7f0000002480)=""/4096, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r2}}, 0x58) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x80, 0x9, 0x6, 0x7, 0x0, 0xffffffffffff44f6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x8142, 0x3, 0x8, 0x9, 0x4010, 0x10001, 0x8, 0x0, 0xc58, 0x0, 0x1000}, r6, 0xd, r0, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="c8", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r8, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feff03ff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x1010, r9, 0x6b2f8000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)="e203d9655829dfacef50e723cd6dfb218a3b7d7fafa037c26cbe3aa5aa341fa6af98ee6765c76505552466e81f56fbb1b034128d801e6b52cd60376024ce64cc8fad33f4173123706c481bb1a108170cbced557ecb8f385ab219ed7527707473a4638e4e2b81c5231bb85fbd1fecb4cf3e27958d76680ea13e925dc0a0bf77f3eebb1d991c6ca8c27e4c3e8fb67aa6ef6554603bb00b62aebc85c193413e82929d1bfe1357030991212e7127e2ae8b3ca50268e9f2c5f74930b461493acc93609f2c65c258362e0609146ffcadb9e35e874ec64ca44ac2"}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18022000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r10, 0xffffffffffffffff, 0x0) 2.113418524s ago: executing program 3 (id=969): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "df1cd007725c59f703000000cf8aca036ba5ec99a3374fc96065bbcfcb88eb99e8960dd65f31"}, 0x31) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r9, r0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8912, 0x0) syz_clone(0x4001200, 0x0, 0x35, 0x0, 0x0, 0x0) 1.987792306s ago: executing program 3 (id=970): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=0x0], 0x50) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x0, 0x6b2b}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)='W', 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000400)=0xfffffffb, 0x4) recvmmsg(r0, &(0x7f0000001d00), 0x1, 0x40012142, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0867d1f7c098537637059ad1e2b87b9552e7693b3c0900481f70803668036c562ba826e8944d41247dd393de0dc78f3d3d1cd7b657ccf0116553a9c9a154529f3e458806f650f16f4ea1a8cb9248d12319f0786ad77f82a10d1ff5d7a936e18a7524f98f20e7e91ec970405e0a63a5eea9371702eb8b23e55f0306af3344e1778e8e9fd831612b93ddea9e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801e6ff00000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='scmi_xfer_begin\x00', r4, 0x0, 0xd52}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000005, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 1.912454187s ago: executing program 2 (id=972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x1, 0x8080c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) io_setup(0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x3201, 0x3, 0x969}) io_uring_enter(r2, 0x0, 0xcb, 0xf, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) fallocate(r1, 0x0, 0xd, 0x8000c67) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000300)='./file1\x00', 0xa080, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f00008fc000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f00003b8000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.862590537s ago: executing program 3 (id=973): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x501400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xffff}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x7, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="698d12f1b3a05526f5a5d11ef5b48361f7ef6d274d884c6f8749ee6814571cd7b712908c8f9f450ba9d7b9fb373c20b6f509f104df51a95c32d664f61498329e45650b1756407a3e8bf04e9a8c0c7feb7a4db81b320109926513654d3d4092bffc732f8925d88e0405a072d5ee2e0c65c1a403dd4285233ac3d39d7e4067158ef6d4cad4920d7de74762e19e52ef2a4c0844c1980180b3e4201e14a338ee266737e2dc4b4f1a3155f5ca5612b15b22019274933a5bf7dd5ee7381ad55bc6a00d5dc6e9ac4c09728eabc36d1daa8ba6f71295846572c40edd2d276c7afa110fc677b0e6e0239a64c0ba310176dee82eb3d88ea3ac0b6561d11ee83ea0e1966ce16012e4aa6986"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a000000956e4f92c55726abda887bc7537d0f4ca69ac146cadac7196ca1e9d57977e50e48a6d3a41707397aebcdb73de9da8e79a18afbacfaf2e469569a968079a10b923afe9a14d188b84611841967e641e1d78cfc1de5ba0a18ca0deb5d6e1b470fcd2979610a62e3a35e7a51c08550726cc25567f40e369b14818c188871c783034e29c694ef6689d5e5f504bbad7fcd72f7d80f9797be0517"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc020000080000000000000000000001080017004e244e23"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x8020000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', '', [{}, {0x20, 'trusted.overlay.upper\x00'}, {0x20, ')'}]}, 0x1e) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) 1.61958108s ago: executing program 0 (id=976): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xff}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x1a400000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x2, 0x0, 0x2}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x5, 0x3, 0x81, 0x4800}, {0x5, 0x9, 0xc0, 0x1}, {0x3, 0xe, 0x24, 0x9}, {0xfff8, 0x9, 0x4, 0x6}]}) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r6, 0x2def, 0xb80c, 0xe, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r11}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.358162943s ago: executing program 4 (id=977): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = getpgid(0x0) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) pwrite64(r2, &(0x7f00000000c0)="49f7697d3935285dc4bfe7728539e520d041603262b059fba180cb6a3e7808e3c0f26fffded4e606c043752b1ecacfec83593605836af2ecbad4dbc3831a11e6c63cdcdc06bd26a6d5819bfbabefee394f3d769c74b191c9cc4dfcb3508f5f28354660251d21293d22ec6068071ac1d0c5833b2f8cbfd529a03c65385206239263aa4aabe66681072c865f6134b1a510a8533cae46f389b44a0fa52ece1044df66e9cee6cdbd7194f35b8418056a", 0xae, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13, @void, @value}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs$pagemap(r1, 0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x20000, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.357289913s ago: executing program 4 (id=978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000002a6de5ea00000000000000000001feffffffffffffff0000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000e1"], 0x1a0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x85, "00000000000000000000ffff00"}) io_setup(0x20, &(0x7f0000001140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040400) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000001, 0xe}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x0) 1.271134815s ago: executing program 3 (id=979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000002a6de5ea00000000000000000001feffffffffffffff0000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000e1"], 0x1a0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x85, "00000000000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x20, &(0x7f0000001140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040400) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000001, 0xe}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_pts(r1, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 832.54201ms ago: executing program 1 (id=982): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e0000002400028014000500000000000000000000000000000000010400120006000e"], 0x58}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4], 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(0x0, &(0x7f0000000a00)='./bus/file0\x00') r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r6) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f00000001c0)={0x800000, 0x7d, 0x80, 0x5, 0x3ffd, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 745.954151ms ago: executing program 4 (id=983): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$usbfs(&(0x7f0000002000), 0xb947, 0x508000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r2, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a00)=""/213, 0xd5, 0x0, &(0x7f0000000b00)=""/136, 0x88}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x48) 745.160251ms ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r0, &(0x7f0000000640)="2400000021002551241cbff3bbb9000c08000b000000000000020000000000bdd1158bec66519372f2141ebb3da1e20000000000000000001b6d54332b72b8716e1c392999e582b814c9237a9281e3871aedf0e89a3b20fe1e50e9c6fa698792bb0f3292e92ce6ff707e18a3692dde23ef3134e252ae7346fc5a087ef290349c3293f2bd7ccdc1b1ef2c9e29c0d23d78bea2e3fecf345748747725be8087fdbe", 0xa0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r2, 0x400, 0x300000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x200}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x80000000000}, 0x18) msgget$private(0x0, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="17bb"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000e00000000001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 650.601352ms ago: executing program 4 (id=985): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r4, 0x0, 0x1000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x7f) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r8 = memfd_secret(0x80000) syz_usbip_server_init(0x1) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) fcntl$setlease(r8, 0x400, 0x0) close(r8) readlinkat(r8, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)=""/110, 0x6e) 650.204852ms ago: executing program 1 (id=986): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x0, 0xfc, 0x20070}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$vcsu(0x0, 0x1, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000720000/0x3000)=nil, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0xa, 0x5, 0x9, 0x0, @mcast2, @private0, 0x7, 0x8000, 0x7, 0x8}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0xfffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00'}, 0x10) mmap(&(0x7f000087b000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r4, 0x87, &(0x7f0000000800)}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 649.943433ms ago: executing program 2 (id=987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x4a) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000480)={[0x7]}, 0x0, 0x8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000180)='nicvf0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xb, 0x80, 0xffffffff, 0x17a}) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) close_range(r6, r5, 0x0) socket(0x10, 0x803, 0x0) 614.920563ms ago: executing program 2 (id=988): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147, @void, @value}, 0x94) 565.877633ms ago: executing program 3 (id=989): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0xc000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18009e00007230cbc7ac0f5a970600f3ffffff00", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet6_udp_int(r2, 0x11, 0x66, 0x0, &(0x7f00000004c0)=0xffffffffffffff97) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) unshare(0x2040600) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TCXONC(r3, 0x540a, 0x1) socket$rds(0x15, 0x5, 0x0) 555.604614ms ago: executing program 1 (id=990): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) io_setup(0xe9, &(0x7f0000000140)=0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) rt_sigaction(0xc, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f00000004c0)={0x0, 0x989680}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x402700, 0x30, 0x28}, 0x18) execveat(r8, 0x0, &(0x7f00000001c0), &(0x7f00000004c0)={[&(0x7f0000000240)='GPL\x00', 0x0, &(0x7f0000000340)='!\'}4)*^\x00', &(0x7f0000000380)='\x00', 0x0, &(0x7f0000000400)='\x00']}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7a1, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$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") creat(0x0, 0xecf86c37d53049cc) 401.192725ms ago: executing program 1 (id=991): r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r4, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8aba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000040)={&(0x7f000001aa80)=""/4096, 0x1000}) semget$private(0x0, 0x6, 0x3b1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000e27f00000100000000000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000075f9cbed649aaa0ab753936f0537baada600"/39, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f52f0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 396.450556ms ago: executing program 3 (id=992): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000001a4c0)={0x11, 0x14, &(0x7f000001a400)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000a78ae1520000d4080000000000007b8a0007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f000001a300)=0x401, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xfff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='rpcgss_upcall_result\x00', r6}, 0x18) syz_mount_image$vfat(&(0x7f000001a5c0), &(0x7f000001a480)='./file1\x00', 0x21003, 0x0, 0xfd, 0x0, &(0x7f000001a480)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=0xffffffffffffffff, 0x4) 360.130816ms ago: executing program 2 (id=993): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 'veth1_to_team\x00'}}, 0x1e) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f0000000340)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = semget$private(0x0, 0x4, 0x589) semtimedop(r3, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000040)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r7, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fddbdf250f00000005002d00000000000500380000000000fe1a7ebc6bb42c8f190e68cf9e2f9531aeffe7c8309e534f073de01cd00a1c13b6543613d8c8a0685cb91ccb29d9fc74e28ab4a4f9e4590f5018f1a7defc7ae4294d4858d963fd7f448b87d06fda4bd0f7e5a9a3ac886ada54d9e9d14fbc9008decc6f72e3e612a656765a351c61f5d4ddc6944214115148fad313b0379abd28ef6006717d674abc5e3cac79dd974ad672d8501e614da95523de439ead93d974848416532363a5065f0dc245d079a2"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x90) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 359.375836ms ago: executing program 1 (id=994): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_free_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a53cf7abb3d6259635a4a8c7bf70da144523d553a7282d799228684e52c8a795cabd26979cce6751d07f1fdd76086fcfb2d08a4d39535166e98ba9df1e1777094051a874b551508e3fdac7a147499f1993f8b14096732f196736f35dff139e46d4ef67fbcd8afded7b4d3c56a7112a"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0xa32, 0x0, 0x47, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000380)={@broadcast, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@llc={0x4, {@snap={0x0, 0x1, "fc", "78c367", 0x19, "30e4101faf4a9d97a22376b5d0e4595429ce8d3d90f23e3ba5776ce6a9a8ceb9f243b367b33f907d780f4394d134f4d657ec4ad09123d6c135ce70b4861dd75436884e13d225d2519b2a2a16d21d29a570e0af92c1b6263d036352b07b29f3ab703942bce53796cd94fa3c0d560d4fe22373ebf1fcdaeeab8f6974af9dc38e5e4d3918cd5acf6e6d9306d85472005294"}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) 305.827856ms ago: executing program 0 (id=995): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "df1cd007725c59f703000000cf8aca036ba5ec99a3374fc96065bbcfcb88eb99e8960dd65f31"}, 0x31) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r9, r0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8912, 0x0) syz_clone(0x4001200, 0x0, 0x35, 0x0, 0x0, 0x0) 272.012847ms ago: executing program 0 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_sync_file_exit\x00', r1, 0x0, 0x2}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x1) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r6, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xffffffff7fffffff}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) 256.847547ms ago: executing program 2 (id=997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, &(0x7f00000008c0), &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x1, &(0x7f0000000700)=""/1, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x5, 0x5, 0x9, 0x8}], 0x10, 0xca, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000b80)='sched_switch\x00', r0}, 0xffffffffffffff24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) creat(&(0x7f00000001c0)='./file1\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@filename='./bus\x00', 0x0, &(0x7f00000000c0)='./file0\x00') acct(0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000008500"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2db, &(0x7f0000000d40)="$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") r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) fallocate(r9, 0x0, 0x0, 0x1001f0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 172.284818ms ago: executing program 0 (id=998): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lremovexattr(0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$kcm(0x10, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}) kcmp(0x0, 0x0, 0x73a4d6576a6ccee2, 0xffffffffffffffff, 0xffffffffffffffff) migrate_pages(0x0, 0x4, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x2}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="170000001600000000000000", @ANYRES32=r1, @ANYBLOB="268ca7c0eb9fdfa08f48878af6cd7ade614a5859beca6cc80a37af5443c38b3a6e8b48764dbfe1658c4ff87005d4a49122dbb5974cf679f5f8d730f0a2d75ac7464e9d517ddca583471ea91c953d0f9d9ab9828229cce3dca2f4b072dbe986db4303a7bf860d2984e8ed7804d113687ef8885921e86b06", @ANYRES64=0x0], 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4c18, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) write$cgroup_subtree(r5, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xffffffffffe, &(0x7f0000006680)) ioperm(0x5, 0x8001, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000003c0)={0x2, 0x6, 0x8}) 166.874838ms ago: executing program 1 (id=999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000002a6de5ea00000000000000000001feffffffffffffff0000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000e1"], 0x1a0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x85, "00000000000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x20, &(0x7f0000001140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040400) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000001, 0xe}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_pts(r1, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 135.771639ms ago: executing program 2 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xf, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2539659acbfc6f886c7b1af8ff00000000bfa100000000000007010000f8ffffff06d476648a36fcb702000008000000b703000000000020850000001800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x40) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c1, &(0x7f0000000a80)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRxC7UiKoCyc4MyBJGJhCYCoYu5pP4NLv4Udw40Y/wYBbQVedReXJ+5c/mIypTRX191sd7nnn3pt32ySbnHf7pfHwzv0kzs4fR5om0TqKo3iSxH60ovFVtAMA+O94kufxS15Eb5/nlQ0r263r3RkAcF2qz/9LffADAP9yH3z08Xu94+Nb72dZGi90H036SUSMH036Vb53Lz6PUdyNm9GNi4h8porfeff4VrSzwn68Op5O+kXl+NPv6/l7P0eU9YfRjf3V9YdZZaF+OunvxrORRe/ebrPVbjy/uv71FfXR78Rrryzs/yC68cNncT9GcSeK2nn9l4dZ9lb+9fkXnxTLFPVJK/p75XWl3BckAAAAAAAAAAAAAAAAAAAAAAC26yDLkqp9T9m/pxiq++/sXJT5g6yxv9yfp6pPmomq/kB50y1nmsc3TX+dm1mW5fWF8/p2vNj2YAEAAAAAAAAAAAAAAAAAAAAonDx8fGMwGt19cPLwdFgEt+vEfOQSQdMNoPlZ/yXLZ8HRwsjLcToc7KyfcG/ztRa7DRR7ferF0W7/tZuwaXA2G3mm2M/Wl9iL2ciHUQXNwWx1referCY9HQ6yOtXc5OEg+bO10ubgvl1MdeKqG8vLP4mLfPlM09lWl6s6W7obnRsrU7/leb7ZPG/8VJ7RXj2SlC02Nlt9tw5WvsAiSIuzSGf/+EXqu/UTrn3L2LnaOw4AAAAAAAAAAAAAAAAAALDO/Ee/K5JnTy1tXdumAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvNn/+fxOkEbE88odgWhevuubXH6tcPdKJByf/5OsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+H3AAAA//8c41ca") prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000040)='./file2\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x81, 0x0, 0x0, 0x200007}, {0x6, 0x0, 0x0, 0xffffff2d}]}) linkat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0x74, 0x40, 0x65, 0x0, 0xfffffffffffffffa, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x106248, 0xc, 0x6, 0x8, 0x5, 0x5, 0xf, 0x0, 0x3, 0x0, 0x6c80000000}, r5, 0xffffffffffffffff, r5, 0x3) 1.74536ms ago: executing program 4 (id=1001): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004d9000000000094f6000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r4, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nombcache}, {@abort}, {@mblk_io_submit}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001bc0)={0x0, 0x100000000}) setgroups(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) r8 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat(r9, &(0x7f0000000340)='.\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r0}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010, r2}, 0x18) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmsg$rds(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/72, 0x48}], 0x2, 0x0, 0x0, 0x40448c1}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r12, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x77c}, [@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @ldst={0x3, 0x2, 0x4, 0x4, 0x2, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x800}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7fff, 0x1000, &(0x7f0000001e80)=""/4096, 0x41000, 0x2, '\x00', r8, 0x1b, r1, 0x8, &(0x7f0000000680)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r13, 0x0, 0x5, &(0x7f00000006c0)=[r14, 0x1, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x4, 0x6}, {0x1, 0x3, 0x6, 0xb}, {0x5, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xb, 0x6}], 0x10, 0x7, @void, @value}, 0x94) r15 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r15, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r17}, 0x10) recvmmsg(r15, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x20, 0x0) sendto$inet6(r15, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): sadm_r:sysadm_t pid=4388 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 57.927838][ T4399] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 57.988217][ T3392] tipc: Node number set to 2886997007 [ 58.017812][ T4402] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 58.598194][ T4428] bridge_slave_0: left allmulticast mode [ 58.603938][ T4428] bridge_slave_0: left promiscuous mode [ 58.609722][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.797143][ T4428] bridge_slave_1: left allmulticast mode [ 58.802959][ T4428] bridge_slave_1: left promiscuous mode [ 58.808752][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.826372][ T4428] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 58.834338][ T4428] bond_slave_0: left promiscuous mode [ 58.843655][ T4428] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 58.851907][ T4428] bond_slave_1: left promiscuous mode [ 58.865146][ T4428] team0: Port device team_slave_0 removed [ 58.877575][ T4428] team0: Port device team_slave_1 removed [ 58.885971][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.893412][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.904223][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.911662][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.951076][ T3392] IPVS: starting estimator thread 0... [ 59.044710][ T4430] IPVS: using max 2256 ests per chain, 112800 per kthread [ 59.158076][ T4437] veth1_macvtap: left promiscuous mode [ 59.309758][ T4433] lo speed is unknown, defaulting to 1000 [ 59.714750][ T4450] lo speed is unknown, defaulting to 1000 [ 59.745523][ T4462] loop2: detected capacity change from 0 to 512 [ 59.774104][ T4462] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 59.896378][ T4465] __nla_validate_parse: 3 callbacks suppressed [ 59.896394][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 59.938588][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 60.025453][ T4471] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 60.025453][ T4471] program syz.3.225 not setting count and/or reply_len properly [ 60.156618][ T4479] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 60.192994][ T4479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.226'. [ 60.259760][ T4486] loop3: detected capacity change from 0 to 512 [ 60.319649][ T4491] loop4: detected capacity change from 0 to 512 [ 60.344345][ T4491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.362677][ T4491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 60.419560][ T4480] lo speed is unknown, defaulting to 1000 [ 60.444193][ T4497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23824 sclass=netlink_route_socket pid=4497 comm=syz.0.231 [ 60.465835][ T4491] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.229: missing EA_INODE flag [ 60.501942][ T4486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.514433][ T4491] EXT4-fs (loop4): Remounting filesystem read-only [ 60.542016][ T4491] EXT4-fs (loop4): 1 orphan inode deleted [ 60.583423][ T4491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.598256][ T4486] EXT4-fs (loop3): 1 truncate cleaned up [ 60.625666][ T4491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.650441][ T4486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.842641][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 60.851879][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 60.869273][ T4506] tipc: Enabling of bearer rejected, already enabled [ 60.877783][ T4499] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 60.914643][ T4506] pim6reg: entered allmulticast mode [ 60.922939][ T4506] pim6reg: left allmulticast mode [ 60.934440][ T4508] loop4: detected capacity change from 0 to 512 [ 60.945491][ T4508] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.955296][ T4508] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 60.972666][ T4508] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.238: Invalid inode table block 0 in block_group 0 [ 60.988773][ T4508] EXT4-fs (loop4): get root inode failed [ 60.994443][ T4508] EXT4-fs (loop4): mount failed [ 61.111980][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 61.223601][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 61.233492][ T4524] tipc: Enabling of bearer rejected, already enabled [ 61.243642][ T4516] loop2: detected capacity change from 0 to 512 [ 61.257914][ T4516] EXT4-fs: Ignoring removed i_version option [ 61.264606][ T4516] ext4: Bad value for 'auto_da_alloc' [ 61.279622][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.350469][ T4531] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 61.350469][ T4531] program syz.3.243 not setting count and/or reply_len properly [ 61.398604][ T4537] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 61.398604][ T4537] program syz.2.246 not setting count and/or reply_len properly [ 61.456012][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 61.582343][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 61.591662][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 61.601072][ T4548] tipc: Enabling of bearer rejected, already enabled [ 61.614383][ T4548] pim6reg: entered allmulticast mode [ 61.620569][ T4548] pim6reg: left allmulticast mode [ 61.696312][ T4544] lo speed is unknown, defaulting to 1000 [ 61.734273][ T4552] pim6reg: entered allmulticast mode [ 61.745486][ T4552] pim6reg: left allmulticast mode [ 61.769420][ T4554] loop2: detected capacity change from 0 to 1024 [ 61.787730][ T4554] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.798787][ T4554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.822638][ T4554] JBD2: no valid journal superblock found [ 61.828453][ T4554] EXT4-fs (loop2): Could not load journal inode [ 61.903369][ T4560] lo speed is unknown, defaulting to 1000 [ 61.904070][ T4562] Cannot find del_set index 2 as target [ 62.024477][ T4567] tipc: Enabling of bearer rejected, failed to enable media [ 62.083744][ T4571] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 62.083744][ T4571] program syz.2.258 not setting count and/or reply_len properly [ 62.143118][ T4574] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 62.143118][ T4574] program syz.4.259 not setting count and/or reply_len properly [ 62.438482][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 62.438497][ T29] audit: type=1326 audit(1748864871.880:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.470983][ T4585] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 62.470983][ T4585] program syz.4.271 not setting count and/or reply_len properly [ 62.497290][ T29] audit: type=1326 audit(1748864871.910:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.520742][ T29] audit: type=1326 audit(1748864871.910:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.544222][ T29] audit: type=1326 audit(1748864871.910:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.567698][ T29] audit: type=1326 audit(1748864871.910:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.591004][ T29] audit: type=1326 audit(1748864871.910:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.614436][ T29] audit: type=1326 audit(1748864871.910:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.620048][ T4588] tipc: Enabling of bearer rejected, already enabled [ 62.637811][ T29] audit: type=1326 audit(1748864871.910:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.637849][ T29] audit: type=1326 audit(1748864871.910:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.692241][ T29] audit: type=1326 audit(1748864871.910:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 62.730565][ T4588] pim6reg: entered allmulticast mode [ 62.736604][ T4588] pim6reg: left allmulticast mode [ 62.864619][ T4601] loop3: detected capacity change from 0 to 512 [ 62.879668][ T4601] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 62.879695][ T4601] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 62.890291][ T4601] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.265: Invalid inode table block 0 in block_group 0 [ 62.890499][ T4601] EXT4-fs (loop3): get root inode failed [ 62.918695][ T4601] EXT4-fs (loop3): mount failed [ 62.932987][ T4604] siw: device registration error -23 [ 62.943126][ T4611] syz_tun: entered allmulticast mode [ 62.974952][ T4613] gretap0: entered promiscuous mode [ 62.981400][ T4613] 0ªX¹¦D: renamed from gretap0 [ 62.990007][ T4613] 0ªX¹¦D: left promiscuous mode [ 62.995035][ T4613] 0ªX¹¦D: entered allmulticast mode [ 63.008167][ T4613] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 63.039579][ T4617] bridge_slave_0: left allmulticast mode [ 63.045440][ T4617] bridge_slave_0: left promiscuous mode [ 63.051303][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.084635][ T4617] bridge_slave_1: left allmulticast mode [ 63.090364][ T4617] bridge_slave_1: left promiscuous mode [ 63.096107][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.154363][ T4617] bond0: (slave bond_slave_0): Releasing backup interface [ 63.173899][ T4617] bond0: (slave bond_slave_1): Releasing backup interface [ 63.193419][ T4617] team0: Port device team_slave_1 removed [ 63.200459][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.207984][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.219734][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.227245][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.249869][ T4617] team0: Port device batadv1 removed [ 63.306313][ T4620] lo speed is unknown, defaulting to 1000 [ 63.426269][ T4630] tipc: Enabling of bearer rejected, failed to enable media [ 63.558150][ T4634] lo speed is unknown, defaulting to 1000 [ 63.631114][ T4636] lo speed is unknown, defaulting to 1000 [ 63.673773][ T4605] syz_tun: left allmulticast mode [ 63.710700][ T4644] tipc: Enabling of bearer rejected, already enabled [ 63.729067][ T4644] pim6reg: entered allmulticast mode [ 63.739388][ T4644] pim6reg: left allmulticast mode [ 63.869773][ T4656] loop2: detected capacity change from 0 to 764 [ 63.916737][ T4656] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.953589][ T4662] 9pnet_fd: Insufficient options for proto=fd [ 63.967939][ T4656] Symlink component flag not implemented [ 63.973670][ T4656] Symlink component flag not implemented [ 63.991140][ T4664] tipc: Enabling of bearer rejected, failed to enable media [ 64.015161][ T4656] Symlink component flag not implemented (128) [ 64.021496][ T4656] Symlink component flag not implemented (122) [ 64.075008][ T4671] loop4: detected capacity change from 0 to 512 [ 64.120145][ T4671] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.168824][ T4647] sctp: [Deprecated]: +}[@ (pid 4647) Use of int in maxseg socket option. [ 64.168824][ T4647] Use struct sctp_assoc_value instead [ 64.207966][ T4671] Cannot find del_set index 3 as target [ 64.514531][ T4712] syz_tun: entered allmulticast mode [ 64.531048][ T4705] lo speed is unknown, defaulting to 1000 [ 64.836083][ T4724] tipc: Enabling of bearer rejected, already enabled [ 64.857167][ T4724] pim6reg: entered allmulticast mode [ 64.869596][ T4726] siw: device registration error -23 [ 64.877700][ T4724] pim6reg: left allmulticast mode [ 64.987412][ T4732] __nla_validate_parse: 22 callbacks suppressed [ 64.987433][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 65.066094][ T4736] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 65.066094][ T4736] program syz.2.296 not setting count and/or reply_len properly [ 65.244713][ T4704] syz_tun: left allmulticast mode [ 65.266513][ T4749] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 65.299333][ T4745] 9pnet_fd: Insufficient options for proto=fd [ 65.349924][ T4755] random: crng reseeded on system resumption [ 65.367648][ T4759] netlink: 'syz.4.299': attribute type 11 has an invalid length. [ 65.375446][ T4759] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.299'. [ 65.403505][ T4755] loop2: detected capacity change from 0 to 512 [ 65.411038][ T4755] EXT4-fs: test_dummy_encryption option not supported [ 65.636811][ T4764] netlink: 76 bytes leftover after parsing attributes in process `syz.0.312'. [ 65.738067][ T4766] loop3: detected capacity change from 0 to 512 [ 65.810562][ T4766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.835018][ T4766] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.864530][ T4771] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 65.895040][ T4771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.303'. [ 66.309646][ T4782] Invalid ELF header type: 3 != 1 [ 66.588668][ T1040] IPVS: starting estimator thread 0... [ 66.807720][ T4785] IPVS: using max 2256 ests per chain, 112800 per kthread [ 66.880755][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 66.891351][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.907079][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 66.936612][ T4790] tipc: Enabling of bearer rejected, already enabled [ 66.975569][ T4799] wireguard0: entered promiscuous mode [ 67.031837][ T4804] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 67.031837][ T4804] program syz.3.308 not setting count and/or reply_len properly [ 67.052887][ T4790] pim6reg: entered allmulticast mode [ 67.078663][ T4808] loop4: detected capacity change from 0 to 736 [ 67.146422][ T4808] rock: directory entry would overflow storage [ 67.152751][ T4808] rock: sig=0x3b10, size=4, remaining=3 [ 67.185931][ T4814] bridge_slave_0: left allmulticast mode [ 67.191793][ T4814] bridge_slave_0: left promiscuous mode [ 67.197598][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.210964][ T4814] bridge_slave_1: left allmulticast mode [ 67.216668][ T4814] bridge_slave_1: left promiscuous mode [ 67.222556][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.268474][ T4814] bond0: (slave bond_slave_0): Releasing backup interface [ 67.278268][ T4816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 67.292610][ T4814] bond0: (slave bond_slave_1): Releasing backup interface [ 67.313399][ T4814] team0: Port device team_slave_0 removed [ 67.338129][ T4814] team0: Port device team_slave_1 removed [ 67.348167][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.355685][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.390201][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.397723][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.416386][ T1040] lo speed is unknown, defaulting to 1000 [ 67.445289][ T4431] srz1: Port: 1 Link DOWN [ 67.447219][ T4820] syz_tun: entered allmulticast mode [ 67.502085][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.519807][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.539255][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 67.539306][ T29] audit: type=1400 audit(1748864877.030:3860): avc: denied { create } for pid=4824 comm="syz.1.319" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.573060][ T4823] loop3: detected capacity change from 0 to 256 [ 67.586418][ T29] audit: type=1400 audit(1748864877.061:3861): avc: denied { mounton } for pid=4824 comm="syz.1.319" path="/57/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.609343][ T29] audit: type=1326 audit(1748864877.061:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.632729][ T29] audit: type=1326 audit(1748864877.061:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.656305][ T29] audit: type=1326 audit(1748864877.061:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.663820][ T4823] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 67.679743][ T29] audit: type=1326 audit(1748864877.061:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.710011][ T29] audit: type=1326 audit(1748864877.061:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.733431][ T29] audit: type=1326 audit(1748864877.061:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 67.756872][ T29] audit: type=1326 audit(1748864877.061:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f250a4ee9a3 code=0x7ffc0000 [ 67.780133][ T29] audit: type=1326 audit(1748864877.061:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f250a4ed41f code=0x7ffc0000 [ 67.834842][ T4834] loop2: detected capacity change from 0 to 2048 [ 67.848141][ T4834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.872069][ T4825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.899356][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 67.912300][ T4834] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.316: iget: bogus i_mode (4355) [ 67.926308][ T4834] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.316: iget: bogus i_mode (4355) [ 67.951711][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.999655][ T4825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.192166][ T4807] syz_tun: left allmulticast mode [ 68.399980][ T4852] Invalid ELF header type: 3 != 1 [ 68.586384][ T36] IPVS: starting estimator thread 0... [ 68.666810][ T4825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.761966][ T4825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.826798][ T4850] IPVS: using max 2256 ests per chain, 112800 per kthread [ 68.853711][ T4825] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.869456][ T4825] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.895913][ T4825] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.916133][ T4825] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.953635][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 68.963091][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 68.972959][ T4864] tipc: Enabling of bearer rejected, already enabled [ 68.982695][ T4860] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.988009][ T4864] pim6reg: entered allmulticast mode [ 68.998438][ T4864] pim6reg: left allmulticast mode [ 69.009699][ T4858] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 69.009699][ T4858] program syz.3.326 not setting count and/or reply_len properly [ 69.654054][ T4875] lo speed is unknown, defaulting to 1000 [ 69.668737][ T4881] loop4: detected capacity change from 0 to 512 [ 69.691085][ T4881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.697290][ T4882] tipc: Enabling of bearer rejected, failed to enable media [ 69.741182][ T4881] EXT4-fs (loop4): 1 truncate cleaned up [ 69.770715][ T4881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.054479][ T4906] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 70.062327][ T4906] netlink: 2 bytes leftover after parsing attributes in process `syz.0.338'. [ 70.072641][ T4906] team0: entered promiscuous mode [ 70.077830][ T4906] bridge0: port 1(team0) entered blocking state [ 70.084361][ T4906] bridge0: port 1(team0) entered disabled state [ 70.091656][ T4906] team0: entered allmulticast mode [ 70.099615][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 70.138211][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 70.168283][ T4908] tipc: Enabling of bearer rejected, already enabled [ 70.201253][ T4908] pim6reg: entered allmulticast mode [ 70.237194][ T4908] pim6reg: left allmulticast mode [ 70.367966][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.419537][ T4919] loop4: detected capacity change from 0 to 128 [ 70.461975][ T4919] EXT4-fs: Ignoring removed nobh option [ 70.481371][ T4893] netlink: 'syz.1.335': attribute type 16 has an invalid length. [ 70.493592][ T4919] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.493678][ T4902] loop3: detected capacity change from 0 to 4096 [ 70.552694][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.597134][ T4919] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.618496][ T4893] $Hÿ: left promiscuous mode [ 70.632788][ T4902] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.635912][ T4893] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 70.708790][ T4893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.755565][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.847472][ T4926] syz.1.346 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.048910][ T4939] pim6reg: entered allmulticast mode [ 71.413059][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.492043][ T4946] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 71.492043][ T4946] program syz.4.350 not setting count and/or reply_len properly [ 71.521361][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 71.528145][ T4944] Cannot find del_set index 2 as target [ 71.531400][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 71.548717][ T4948] tipc: Enabling of bearer rejected, already enabled [ 71.559353][ T4948] pim6reg: left allmulticast mode [ 71.671623][ T4959] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.355'. [ 71.750175][ T4964] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 71.758045][ T4964] netlink: 2 bytes leftover after parsing attributes in process `syz.4.358'. [ 71.784050][ T4964] team0: entered promiscuous mode [ 71.784785][ T4966] SELinux: syz.3.357 (4966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.803580][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.813683][ T4964] bridge0: port 1(team0) entered blocking state [ 71.820153][ T4964] bridge0: port 1(team0) entered disabled state [ 71.836696][ T4964] team0: entered allmulticast mode [ 71.869357][ T4966] wireguard0: entered promiscuous mode [ 71.874911][ T4966] wireguard0: entered allmulticast mode [ 71.899934][ T4971] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 71.899934][ T4971] program syz.2.360 not setting count and/or reply_len properly [ 71.959269][ T4976] siw: device registration error -23 [ 72.051443][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 72.072678][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 72.095442][ T4986] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 72.095442][ T4986] program syz.4.364 not setting count and/or reply_len properly [ 72.113882][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 72.147025][ T4989] tipc: Enabling of bearer rejected, failed to enable media [ 72.184743][ T4989] pim6reg: left allmulticast mode [ 72.827514][ T5009] pim6reg: entered allmulticast mode [ 72.912574][ T36] IPVS: starting estimator thread 0... [ 72.999791][ T5012] IPVS: using max 2256 ests per chain, 112800 per kthread [ 73.315352][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 73.315377][ T29] audit: type=1326 audit(1748864882.840:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.787218][ T29] audit: type=1326 audit(1748864882.881:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.810664][ T29] audit: type=1326 audit(1748864882.951:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.834003][ T29] audit: type=1326 audit(1748864882.951:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.857520][ T29] audit: type=1326 audit(1748864882.951:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce883fd2d0 code=0x7ffc0000 [ 73.880919][ T29] audit: type=1326 audit(1748864882.951:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce883fd2d0 code=0x7ffc0000 [ 73.904353][ T29] audit: type=1326 audit(1748864882.951:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.927678][ T29] audit: type=1326 audit(1748864882.951:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.951055][ T29] audit: type=1326 audit(1748864882.951:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 73.974439][ T29] audit: type=1326 audit(1748864882.951:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 74.138192][ T5021] lo speed is unknown, defaulting to 1000 [ 74.422317][ T5032] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 74.422317][ T5032] program syz.4.373 not setting count and/or reply_len properly [ 74.467542][ T5037] wireguard0: entered promiscuous mode [ 74.473163][ T5037] wireguard0: entered allmulticast mode [ 74.678466][ T5050] tipc: Enabling of bearer rejected, failed to enable media [ 74.703438][ T5050] pim6reg: left allmulticast mode [ 75.017360][ T5066] pim6reg: entered allmulticast mode [ 75.384696][ T5065] Cannot find add_set index 0 as target [ 75.449322][ T5071] atomic_op ffff888119a67528 conn xmit_atomic 0000000000000000 [ 75.615979][ T5079] __nla_validate_parse: 2 callbacks suppressed [ 75.615994][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 75.661731][ T5034] lo speed is unknown, defaulting to 1000 [ 75.703787][ T5081] loop4: detected capacity change from 0 to 128 [ 75.828744][ T5086] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 75.845067][ T5084] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.864654][ T5084] SELinux: failed to load policy [ 75.952732][ T5088] loop3: detected capacity change from 0 to 764 [ 76.014503][ T5090] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 76.014503][ T5090] program syz.4.392 not setting count and/or reply_len properly [ 76.152290][ T5096] SELinux: syz.4.394 (5096) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.194643][ T5097] loop3: detected capacity change from 0 to 512 [ 76.217424][ T5097] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 76.231544][ T5097] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.393: iget: bad i_size value: 12154757448730 [ 76.244958][ T5096] wireguard0: entered promiscuous mode [ 76.250528][ T5096] wireguard0: entered allmulticast mode [ 76.264369][ T5097] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.393: couldn't read orphan inode 13 (err -117) [ 76.284473][ T5097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.334997][ T5094] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.371002][ T5094] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 76.522730][ T5076] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 76.603874][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.632316][ T5106] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 76.632316][ T5106] program syz.4.397 not setting count and/or reply_len properly [ 76.656118][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 77.131987][ T5116] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 77.131987][ T5116] program syz.2.400 not setting count and/or reply_len properly [ 77.356018][ T5120] netlink: 76 bytes leftover after parsing attributes in process `syz.3.398'. [ 77.520075][ T5126] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 77.527946][ T5126] netlink: 2 bytes leftover after parsing attributes in process `syz.2.402'. [ 77.587572][ T5131] block device autoloading is deprecated and will be removed. [ 77.818954][ T5126] team0: entered promiscuous mode [ 77.826521][ T5126] bridge0: port 1(team0) entered blocking state [ 77.832867][ T5126] bridge0: port 1(team0) entered disabled state [ 77.858812][ T5126] team0: entered allmulticast mode [ 77.972760][ T5124] loop4: detected capacity change from 0 to 512 [ 77.996824][ T5124] journal_path: Non-blockdev passed as './bus' [ 78.003045][ T5124] EXT4-fs: error: could not find journal device path [ 78.025157][ T5124] netlink: 'syz.4.403': attribute type 16 has an invalid length. [ 78.047192][ T5124] 0ªX¹¦D: left allmulticast mode [ 78.089571][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.122853][ T5124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.139639][ T5127] lo speed is unknown, defaulting to 1000 [ 78.318313][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 78.331364][ T5137] siw: device registration error -23 [ 78.373345][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 78.394315][ T5139] tipc: Enabling of bearer rejected, failed to enable media [ 78.414201][ T5139] pim6reg: left allmulticast mode [ 78.440973][ T5141] netlink: 76 bytes leftover after parsing attributes in process `syz.2.407'. [ 78.554874][ T5141] team0: left allmulticast mode [ 78.560021][ T5141] bridge0: port 1(team0) entered disabled state [ 78.614861][ T5144] 9pnet_fd: Insufficient options for proto=fd [ 78.825150][ T5143] lo speed is unknown, defaulting to 1000 [ 79.023254][ T5152] SELinux: syz.2.408 (5152) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 79.060501][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 79.060515][ T29] audit: type=1326 audit(1748864888.588:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.090137][ T29] audit: type=1326 audit(1748864888.588:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.113641][ T29] audit: type=1326 audit(1748864888.588:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.137004][ T29] audit: type=1326 audit(1748864888.598:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.160371][ T29] audit: type=1326 audit(1748864888.598:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.183780][ T29] audit: type=1326 audit(1748864888.598:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.207260][ T29] audit: type=1326 audit(1748864888.598:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.230692][ T29] audit: type=1326 audit(1748864888.598:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.253887][ T29] audit: type=1326 audit(1748864888.598:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.277308][ T29] audit: type=1326 audit(1748864888.598:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 79.347639][ T5152] wireguard0: entered promiscuous mode [ 79.353212][ T5152] wireguard0: entered allmulticast mode [ 79.362498][ T5156] loop4: detected capacity change from 0 to 512 [ 79.381640][ T5156] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 79.396439][ T5153] netlink: 33924 bytes leftover after parsing attributes in process `syz.3.410'. [ 79.408104][ T5156] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.409: iget: bad i_size value: 12154757448730 [ 79.422866][ T5156] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.409: couldn't read orphan inode 13 (err -117) [ 79.436368][ T5156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.462063][ T5150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.503319][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.601675][ T5172] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 79.601675][ T5172] program syz.3.413 not setting count and/or reply_len properly [ 79.639604][ T5175] hub 9-0:1.0: USB hub found [ 79.649685][ T5175] hub 9-0:1.0: 8 ports detected [ 79.764413][ T5179] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 79.808965][ T5186] SET target dimension over the limit! [ 79.895811][ T5189] netlink: 76 bytes leftover after parsing attributes in process `syz.3.419'. [ 79.900611][ T5187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5187 comm=syz.2.417 [ 79.917329][ T5187] af_packet: tpacket_rcv: packet too big, clamped from 148 to 4294967272. macoff=96 [ 79.947934][ T5191] netlink: 76 bytes leftover after parsing attributes in process `syz.0.420'. [ 79.996775][ T5191] team0: left allmulticast mode [ 80.001862][ T5191] bridge0: port 1(team0) entered disabled state [ 80.014699][ T5192] 9pnet_fd: Insufficient options for proto=fd [ 80.054521][ T5189] lo speed is unknown, defaulting to 1000 [ 80.075969][ T5194] atomic_op ffff888118422d28 conn xmit_atomic 0000000000000000 [ 80.093864][ T5191] 9pnet_fd: Insufficient options for proto=fd [ 80.131011][ T5195] lo speed is unknown, defaulting to 1000 [ 80.309144][ T5201] loop4: detected capacity change from 0 to 512 [ 80.326693][ T5201] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.347725][ T5201] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 80.364897][ T5201] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 80.373850][ T5201] System zones: 0-2, 18-18, 34-34 [ 80.389272][ T5201] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.423: iget: bad i_size value: 360287970189639680 [ 80.407523][ T5201] EXT4-fs (loop4): Remounting filesystem read-only [ 80.419663][ T5209] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.422332][ T5201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.442646][ T5209] loop3: detected capacity change from 0 to 526 [ 80.453890][ T5209] ext4: Unknown parameter 'Y' [ 80.518995][ T5216] wireguard0: entered promiscuous mode [ 80.524510][ T5216] wireguard0: entered allmulticast mode [ 80.571211][ T5221] siw: device registration error -23 [ 80.580976][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.611307][ T5226] __nla_validate_parse: 2 callbacks suppressed [ 80.611322][ T5226] netlink: 76 bytes leftover after parsing attributes in process `syz.0.431'. [ 80.624773][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 80.689181][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 80.710236][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 80.730537][ T5231] tipc: Enabling of bearer rejected, failed to enable media [ 80.758999][ T5226] 9pnet_fd: Insufficient options for proto=fd [ 80.772060][ T5231] pim6reg: entered allmulticast mode [ 80.784570][ T5231] pim6reg: left allmulticast mode [ 80.814510][ T5228] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 80.842111][ T5234] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 80.863102][ T5234] SELinux: failed to load policy [ 80.875258][ T5232] lo speed is unknown, defaulting to 1000 [ 80.882452][ T5237] atomic_op ffff888127473128 conn xmit_atomic 0000000000000000 [ 80.901639][ T5240] netlink: 76 bytes leftover after parsing attributes in process `syz.1.435'. [ 80.920482][ T5242] netlink: 76 bytes leftover after parsing attributes in process `syz.2.436'. [ 81.021847][ T5244] 9pnet_fd: Insufficient options for proto=fd [ 81.065041][ T5242] 9pnet_fd: Insufficient options for proto=fd [ 81.132909][ T5240] lo speed is unknown, defaulting to 1000 [ 81.198978][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 81.223507][ T5247] netlink: 344 bytes leftover after parsing attributes in process `syz.4.438'. [ 81.228400][ T5243] lo speed is unknown, defaulting to 1000 [ 81.280080][ T5254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.450'. [ 81.350520][ T5256] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.376356][ T5256] loop4: detected capacity change from 0 to 525 [ 81.394823][ T5256] ext4: Unknown parameter 'ˆ' [ 81.539204][ T5254] lo speed is unknown, defaulting to 1000 [ 81.564777][ T5272] netlink: 33924 bytes leftover after parsing attributes in process `syz.1.441'. [ 81.583357][ T5249] loop3: detected capacity change from 0 to 512 [ 81.590042][ T5249] journal_path: Non-blockdev passed as './bus' [ 81.596281][ T5249] EXT4-fs: error: could not find journal device path [ 81.629750][ T5274] set match dimension is over the limit! [ 81.661189][ T5276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.661369][ T5249] netlink: 'syz.3.437': attribute type 16 has an invalid length. [ 81.695662][ T5280] tipc: Enabling of bearer rejected, failed to enable media [ 81.724617][ T5249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.755881][ T5280] pim6reg: entered allmulticast mode [ 81.769210][ T5285] pim6reg: left allmulticast mode [ 81.867912][ T5288] loop3: detected capacity change from 0 to 128 [ 81.921116][ T5294] tipc: Enabling of bearer rejected, already enabled [ 81.927734][ T5288] syz.3.447: attempt to access beyond end of device [ 81.927734][ T5288] loop3: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 81.944764][ T5293] hub 9-0:1.0: USB hub found [ 81.946176][ T5288] syz.3.447: attempt to access beyond end of device [ 81.946176][ T5288] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 81.949601][ T5293] hub 9-0:1.0: 8 ports detected [ 81.962792][ T5288] buffer_io_error: 2 callbacks suppressed [ 81.962809][ T5288] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 82.011942][ T5294] pim6reg: entered allmulticast mode [ 82.022242][ T5294] pim6reg: left allmulticast mode [ 82.038136][ T5288] syz.3.447: attempt to access beyond end of device [ 82.038136][ T5288] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 82.051934][ T5288] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 82.081974][ T5288] syz.3.447: attempt to access beyond end of device [ 82.081974][ T5288] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 82.095522][ T5288] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 82.121860][ T5288] syz.3.447: attempt to access beyond end of device [ 82.121860][ T5288] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 82.135386][ T5288] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 82.150416][ T5288] syz.3.447: attempt to access beyond end of device [ 82.150416][ T5288] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 82.163834][ T5288] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 82.173600][ T5288] syz.3.447: attempt to access beyond end of device [ 82.173600][ T5288] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 82.186964][ T5288] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 82.218153][ T5311] team0: left allmulticast mode [ 82.227325][ T5311] team0: left promiscuous mode [ 82.232672][ T5288] syz.3.447: attempt to access beyond end of device [ 82.232672][ T5288] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 82.246089][ T5288] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 82.255543][ T5311] bridge0: port 1(team0) entered disabled state [ 82.266591][ T5288] syz.3.447: attempt to access beyond end of device [ 82.266591][ T5288] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 82.280105][ T5288] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 82.289323][ T5288] syz.3.447: attempt to access beyond end of device [ 82.289323][ T5288] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 82.302697][ T5288] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 82.339667][ T5288] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 82.352882][ T5311] 9pnet_fd: Insufficient options for proto=fd [ 82.391186][ T5316] pim6reg: entered allmulticast mode [ 82.463008][ T5319] SELinux: syz.2.456 (5319) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.511604][ T5319] wireguard0: entered promiscuous mode [ 82.517131][ T5319] wireguard0: entered allmulticast mode [ 82.561947][ T5322] loop3: detected capacity change from 0 to 512 [ 82.569880][ T5315] lo speed is unknown, defaulting to 1000 [ 82.605536][ T5322] EXT4-fs: Ignoring removed nobh option [ 82.633153][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.457: corrupted inode contents [ 82.647374][ T5322] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.457: mark_inode_dirty error [ 82.671298][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.457: corrupted inode contents [ 82.714123][ T5322] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.457: mark_inode_dirty error [ 82.736919][ T5317] lo speed is unknown, defaulting to 1000 [ 82.756000][ T5322] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.457: Failed to acquire dquot type 0 [ 82.772747][ T5328] netlink: 'syz.2.458': attribute type 13 has an invalid length. [ 82.806402][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.457: corrupted inode contents [ 82.826880][ T5329] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 82.848086][ T5322] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.457: mark_inode_dirty error [ 82.870664][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.457: corrupted inode contents [ 82.900177][ T5322] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.457: mark_inode_dirty error [ 82.913303][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.457: corrupted inode contents [ 82.925528][ T5322] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 82.935563][ T5322] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.457: corrupted inode contents [ 82.948199][ T5322] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.457: mark_inode_dirty error [ 82.959625][ T5322] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 82.970376][ T5322] EXT4-fs (loop3): 1 truncate cleaned up [ 82.976467][ T5322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.989460][ T5322] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.032009][ T5328] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.041072][ T5328] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.050124][ T5328] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.059387][ T5328] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.105841][ T5322] openvswitch: netlink: Message has 6 unknown bytes. [ 83.148051][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.227681][ T5341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5341 comm=syz.3.463 [ 83.240278][ T5341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5341 comm=syz.3.463 [ 83.261493][ T5341] IPv6: Can't replace route, no match found [ 83.322225][ T5347] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 83.322225][ T5347] program syz.2.466 not setting count and/or reply_len properly [ 83.349057][ T5345] tipc: Enabling of bearer rejected, failed to enable media [ 83.373147][ T5345] pim6reg: entered allmulticast mode [ 83.381127][ T5345] pim6reg: left allmulticast mode [ 83.409074][ T5353] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 83.429427][ T5353] geneve1: entered promiscuous mode [ 83.437816][ T5353] team0: Port device geneve1 added [ 83.492656][ T5353] netlink: 'syz.0.468': attribute type 27 has an invalid length. [ 83.531419][ T5353] 0ªX¹¦D: left allmulticast mode [ 83.652245][ T5353] team0: left promiscuous mode [ 83.681217][ T5353] geneve1: left promiscuous mode [ 83.840868][ T5353] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.849952][ T5353] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.859102][ T5353] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.868214][ T5353] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.889690][ T5385] Cannot find del_set index 2 as target [ 83.946695][ T5382] syz1: Port: 1 Link DOWN [ 84.037164][ T5392] loop4: detected capacity change from 0 to 256 [ 84.070174][ T5392] vfat: Bad value for 'shortname' [ 84.088893][ T5396] team0: Port device geneve1 removed [ 84.094411][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 84.094427][ T29] audit: type=1326 audit(1748864893.655:5479): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 84.094493][ T29] audit: type=1326 audit(1748864893.655:5480): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 84.094528][ T29] audit: type=1326 audit(1748864893.655:5481): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 84.094562][ T29] audit: type=1326 audit(1748864893.655:5482): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 84.094673][ T29] audit: type=1326 audit(1748864893.655:5483): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce883f5927 code=0x7ffc0000 [ 84.094708][ T29] audit: type=1326 audit(1748864893.655:5484): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce8839ab39 code=0x7ffc0000 [ 84.094891][ T29] audit: type=1326 audit(1748864893.655:5485): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 84.094935][ T29] audit: type=1326 audit(1748864893.655:5486): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce883fd2d0 code=0x7ffc0000 [ 84.633444][ T5406] lo speed is unknown, defaulting to 1000 [ 84.883587][ T5427] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 85.028620][ T5433] hsr_slave_0: left promiscuous mode [ 85.034482][ T5433] hsr_slave_1: left promiscuous mode [ 85.114450][ T5440] vhci_hcd: default hub control req: 6031 v09fa i0008 l0 [ 85.371508][ T5443] SELinux: syz.3.482 (5443) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 85.413703][ T29] audit: type=1326 audit(1748864894.988:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 85.461243][ T5443] wireguard0: entered promiscuous mode [ 85.462899][ T29] audit: type=1326 audit(1748864894.988:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 85.466770][ T5443] wireguard0: entered allmulticast mode [ 85.660421][ T5445] lo speed is unknown, defaulting to 1000 [ 85.717597][ T5453] hub 9-0:1.0: USB hub found [ 85.735035][ T5453] hub 9-0:1.0: 8 ports detected [ 85.819162][ T5455] Cannot find del_set index 2 as target [ 85.909649][ T5448] netlink: 'syz.0.480': attribute type 16 has an invalid length. [ 85.931773][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.942086][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.954142][ T5448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.994497][ T5469] __nla_validate_parse: 19 callbacks suppressed [ 85.994513][ T5469] netlink: 76 bytes leftover after parsing attributes in process `syz.2.486'. [ 86.133644][ T5464] lo speed is unknown, defaulting to 1000 [ 86.217203][ T5476] hub 8-0:1.0: USB hub found [ 86.222096][ T5476] hub 8-0:1.0: 8 ports detected [ 86.674343][ T5470] lo speed is unknown, defaulting to 1000 [ 86.697673][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 86.773931][ T5481] lo speed is unknown, defaulting to 1000 [ 87.125301][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 87.198405][ T5488] netlink: 344 bytes leftover after parsing attributes in process `syz.3.490'. [ 87.518740][ T5496] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 87.518740][ T5496] program syz.3.494 not setting count and/or reply_len properly [ 87.606215][ T5498] wireguard0: entered promiscuous mode [ 87.611745][ T5498] wireguard0: entered allmulticast mode [ 87.680866][ T5502] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 87.741308][ T5502] bond1: entered promiscuous mode [ 87.746427][ T5502] bond1: entered allmulticast mode [ 87.826050][ T5502] geneve2: entered allmulticast mode [ 87.866023][ T5502] bond1: (slave geneve2): making interface the new active one [ 87.873566][ T5502] geneve2: entered promiscuous mode [ 87.920485][ T5502] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 87.985373][ T5507] Cannot find del_set index 2 as target [ 88.070143][ T5510] loop4: detected capacity change from 0 to 512 [ 88.110771][ T5510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.120337][ T5513] loop3: detected capacity change from 0 to 1024 [ 88.134543][ T5510] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.498: bad orphan inode 13 [ 88.160439][ T5513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.187953][ T5510] ext4_test_bit(bit=12, block=18) = 1 [ 88.193473][ T5510] is_bad_inode(inode)=0 [ 88.197645][ T5510] NEXT_ORPHAN(inode)=2130706432 [ 88.202506][ T5510] max_ino=32 [ 88.205800][ T5510] i_nlink=1 [ 88.226963][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.244134][ T5513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.500'. [ 88.278492][ T5510] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 88.318828][ T5510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.498: bg 0: block 248: padding at end of block bitmap is not set [ 88.337393][ T5510] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.498: Failed to acquire dquot type 1 [ 88.354806][ T5535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5535 comm=syz.2.504 [ 88.368065][ T5510] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.383551][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.394246][ T5535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5535 comm=syz.2.504 [ 88.419738][ T5539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 88.424822][ T5538] loop3: detected capacity change from 0 to 256 [ 88.448463][ T5538] msdos: Unknown parameter 'dttq' [ 88.519126][ T5538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.629841][ T5545] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.507'. [ 88.676458][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 88.688327][ T5546] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.697182][ T5546] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.705942][ T5546] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.714739][ T5546] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.723870][ T5546] vxlan0: entered promiscuous mode [ 88.812658][ T5552] loop3: detected capacity change from 0 to 512 [ 88.847459][ T5552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.874546][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.886486][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.899619][ T5552] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.938891][ T5558] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 88.938891][ T5558] program syz.4.511 not setting count and/or reply_len properly [ 88.987821][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.063025][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 89.586650][ T5574] lo speed is unknown, defaulting to 1000 [ 89.881957][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.919613][ T3391] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.924685][ T5588] Cannot find add_set index 0 as target [ 90.018057][ T5592] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.520'. [ 90.076328][ T5595] loop4: detected capacity change from 0 to 2048 [ 90.084641][ T5593] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 90.170937][ T5595] loop4: p1 < > p4 [ 90.175918][ T5595] loop4: p4 size 8388608 extends beyond EOD, truncated [ 90.254411][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 90.254429][ T29] audit: type=1326 audit(1748864899.839:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 90.284163][ T29] audit: type=1326 audit(1748864899.839:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 90.307651][ T29] audit: type=1326 audit(1748864899.839:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 90.351999][ T29] audit: type=1326 audit(1748864899.939:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.375543][ T29] audit: type=1326 audit(1748864899.939:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.399010][ T29] audit: type=1326 audit(1748864899.939:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.422448][ T29] audit: type=1326 audit(1748864899.939:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.426986][ T5582] loop3: detected capacity change from 0 to 512 [ 90.445783][ T29] audit: type=1326 audit(1748864899.939:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f527356d2d0 code=0x7ffc0000 [ 90.445824][ T29] audit: type=1326 audit(1748864899.939:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.445922][ T29] audit: type=1326 audit(1748864899.939:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 90.460183][ T5611] vti0: entered allmulticast mode [ 90.564182][ T5608] tipc: Started in network mode [ 90.566178][ T5582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.569230][ T5608] tipc: Node identity ac14140f, cluster identity 4711 [ 90.569681][ T5608] tipc: New replicast peer: 0.0.255.255 [ 90.569727][ T5608] tipc: Enabled bearer , priority 10 [ 90.668977][ T5611] netlink: 'syz.1.525': attribute type 21 has an invalid length. [ 90.708913][ T5582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.733521][ T5582] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.789394][ T5616] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 90.789394][ T5616] program syz.2.526 not setting count and/or reply_len properly [ 90.916715][ T5623] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 90.916715][ T5623] program syz.2.528 not setting count and/or reply_len properly [ 91.018976][ T5630] random: crng reseeded on system resumption [ 91.026072][ T5627] __nla_validate_parse: 2 callbacks suppressed [ 91.026119][ T5627] netlink: 52 bytes leftover after parsing attributes in process `syz.4.529'. [ 91.058616][ T5627] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 91.066546][ T5627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 91.079629][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.106678][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 91.118626][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 91.139678][ T5627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148501][ T5627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.157398][ T5627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166172][ T5627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184389][ T5627] team0: Port device geneve1 added [ 91.196852][ T5640] loop4: detected capacity change from 0 to 736 [ 91.222325][ T5640] iso9660: Unknown parameter 'kvm_dirty_ring_exit' [ 91.242971][ T5643] loop3: detected capacity change from 0 to 1024 [ 91.258670][ T5627] netlink: 'syz.4.529': attribute type 27 has an invalid length. [ 91.276100][ T5643] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.287119][ T5643] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.303585][ T5643] JBD2: no valid journal superblock found [ 91.309411][ T5643] EXT4-fs (loop3): Could not load journal inode [ 91.344700][ T5627] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.353720][ T5627] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.362657][ T5627] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.371747][ T5627] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.411017][ T5656] Cannot find del_set index 2 as target [ 91.535962][ T5674] siw: device registration error -23 [ 91.553725][ T5673] vti0: entered allmulticast mode [ 91.629266][ T5676] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.662173][ T5683] netlink: 60 bytes leftover after parsing attributes in process `syz.0.536'. [ 91.677084][ T5684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 91.686640][ T9] tipc: Node number set to 2886997007 [ 91.711941][ T5693] pim6reg: entered allmulticast mode [ 91.739236][ T5676] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.766143][ T5686] pim6reg: left allmulticast mode [ 91.801997][ T5689] netlink: 'syz.2.547': attribute type 21 has an invalid length. [ 91.825114][ T5676] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.846950][ T5696] netlink: 76 bytes leftover after parsing attributes in process `syz.4.541'. [ 91.863051][ T5696] team0: Port device geneve1 removed [ 91.909359][ T5696] lo speed is unknown, defaulting to 1000 [ 91.932062][ T5676] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.099619][ T5676] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118681][ T5700] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 92.118681][ T5700] program syz.4.542 not setting count and/or reply_len properly [ 92.180863][ T5676] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198117][ T5703] xt_hashlimit: size too large, truncated to 1048576 [ 92.204930][ T5703] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 92.299530][ T5676] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.409388][ T5676] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434016][ T5712] Cannot find del_set index 2 as target [ 92.442327][ T5707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.476379][ T5715] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 92.510100][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 92.530041][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 92.546860][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 92.556836][ T5725] hsr_slave_0: left promiscuous mode [ 92.562937][ T5725] hsr_slave_1: left promiscuous mode [ 92.572119][ T5721] tipc: Enabling of bearer rejected, failed to enable media [ 92.590809][ T5721] pim6reg: entered allmulticast mode [ 92.597243][ T5721] pim6reg: left allmulticast mode [ 92.693162][ T5739] loop3: detected capacity change from 0 to 1024 [ 92.708606][ T5739] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.719678][ T5739] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.751916][ T5739] JBD2: no valid journal superblock found [ 92.757843][ T5739] EXT4-fs (loop3): Could not load journal inode [ 92.773082][ T5742] binfmt_misc: register: failed to install interpreter file ./file2 [ 92.814916][ T5734] lo speed is unknown, defaulting to 1000 [ 92.869831][ T5746] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 92.900704][ T5746] team0: Port device dummy0 added [ 92.918077][ T5746] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 92.931200][ T5747] vlan1: entered allmulticast mode [ 92.936501][ T5747] bridge_slave_0: entered allmulticast mode [ 92.944691][ T5747] bridge0: port 1(vlan1) entered blocking state [ 92.951015][ T5747] bridge0: port 1(vlan1) entered disabled state [ 92.959822][ T5747] vlan1: entered promiscuous mode [ 92.965009][ T5747] bridge_slave_0: entered promiscuous mode [ 92.971849][ T5747] bridge0: mtu less than device minimum [ 92.996365][ T5746] team0: Port device dummy0 removed [ 93.015817][ T5746] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.029130][ T5383] srz1: Port: 1 Link ACTIVE [ 93.066520][ T5750] loop3: detected capacity change from 0 to 164 [ 93.087574][ T5750] Unable to read rock-ridge attributes [ 93.145848][ T5752] loop4: detected capacity change from 0 to 1024 [ 93.187197][ T5752] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.188382][ T5754] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.198125][ T5752] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.233728][ T5752] JBD2: no valid journal superblock found [ 93.239532][ T5752] EXT4-fs (loop4): Could not load journal inode [ 93.320978][ T5752] Cannot find add_set index 0 as target [ 93.342529][ T5756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.398502][ T5754] loop3: detected capacity change from 0 to 8192 [ 93.448894][ T5763] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 93.448894][ T5763] program syz.4.564 not setting count and/or reply_len properly [ 93.484156][ T5754] syz.3.563 (5754): attempted to duplicate a private mapping with mremap. This is not supported. [ 93.496185][ T5761] pim6reg: entered allmulticast mode [ 93.513553][ T5762] pim6reg: left allmulticast mode [ 93.603016][ T5756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.647385][ T5769] loop4: detected capacity change from 0 to 164 [ 93.668273][ T5771] tipc: Enabling of bearer rejected, failed to enable media [ 93.678609][ T5769] Unable to read rock-ridge attributes [ 93.690743][ T5771] pim6reg: entered allmulticast mode [ 93.698413][ T5771] pim6reg: left allmulticast mode [ 93.758353][ T5775] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 93.758353][ T5775] program syz.2.569 not setting count and/or reply_len properly [ 93.809501][ T5756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.864493][ T5782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5782 comm=syz.3.572 [ 93.878891][ T5782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5782 comm=syz.3.572 [ 93.951362][ T5756] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.022566][ T5789] bond0: (slave dummy0): Releasing backup interface [ 94.109579][ T5789] bond1: (slave geneve2): Releasing active interface [ 94.141819][ T5789] geneve2: left promiscuous mode [ 94.153208][ T5793] openvswitch: netlink: Message has 6 unknown bytes. [ 94.228787][ T5795] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 94.265325][ T5795] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 94.379720][ T5795] netlink: 'syz.2.575': attribute type 27 has an invalid length. [ 94.394232][ T5795] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.403347][ T5795] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.412329][ T5795] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.421209][ T5795] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.435380][ T5795] vxlan0: left promiscuous mode [ 94.441148][ T5795] vti0: left allmulticast mode [ 94.447304][ T9] srz1: Port: 1 Link DOWN [ 94.491103][ T5798] smc: net device bond0 erased user defined pnetid SYZ2 [ 94.509404][ T5790] lo speed is unknown, defaulting to 1000 [ 94.592101][ T5800] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 94.592101][ T5800] program syz.2.577 not setting count and/or reply_len properly [ 94.618562][ T5756] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.663838][ T5756] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.715388][ T5756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737633][ T5756] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.774734][ T5791] lo speed is unknown, defaulting to 1000 [ 94.844165][ T5816] tipc: Enabling of bearer rejected, failed to enable media [ 94.882873][ T5816] pim6reg: entered allmulticast mode [ 94.893649][ T5816] pim6reg: left allmulticast mode [ 94.905468][ T5811] siw: device registration error -23 [ 94.963984][ T5826] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 94.963984][ T5826] program syz.4.584 not setting count and/or reply_len properly [ 95.051930][ T5832] tipc: Enabling of bearer rejected, failed to enable media [ 95.085386][ T5832] pim6reg: entered allmulticast mode [ 95.091615][ T5832] pim6reg: left allmulticast mode [ 95.192215][ T5836] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 95.242474][ T5836] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 95.259498][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 95.259516][ T29] audit: type=1400 audit(1748864904.847:6514): avc: denied { ioctl } for pid=5837 comm="syz.2.588" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.311617][ T5840] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 95.311617][ T5840] program syz.4.589 not setting count and/or reply_len properly [ 95.349427][ T5836] netlink: 'syz.1.587': attribute type 27 has an invalid length. [ 95.360880][ T29] audit: type=1326 audit(1748864904.937:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 95.384397][ T29] audit: type=1326 audit(1748864904.937:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 95.408241][ T29] audit: type=1326 audit(1748864904.937:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 95.431694][ T29] audit: type=1326 audit(1748864904.937:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f250a4ee9a3 code=0x7ffc0000 [ 95.455011][ T29] audit: type=1326 audit(1748864904.947:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f250a4ed41f code=0x7ffc0000 [ 95.478192][ T29] audit: type=1326 audit(1748864904.947:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f250a4ee9f7 code=0x7ffc0000 [ 95.501491][ T29] audit: type=1326 audit(1748864904.947:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f250a4ed2d0 code=0x7ffc0000 [ 95.524968][ T29] audit: type=1326 audit(1748864904.947:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f250a4ed5ca code=0x7ffc0000 [ 95.548311][ T29] audit: type=1326 audit(1748864904.947:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 95.686560][ T5856] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 95.686560][ T5856] program syz.4.591 not setting count and/or reply_len properly [ 95.833897][ T5836] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.842481][ T5836] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.850930][ T5836] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.859307][ T5836] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.372792][ T5836] vti0: left allmulticast mode [ 96.402532][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.411408][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420296][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429081][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.502128][ T5868] __nla_validate_parse: 24 callbacks suppressed [ 96.502146][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 96.529969][ T5859] geneve2: entered promiscuous mode [ 96.535355][ T5859] geneve2: entered allmulticast mode [ 96.614834][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 96.623852][ T5859] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.632790][ T5859] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.641714][ T5859] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.650759][ T5859] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.674701][ T5868] tipc: Enabling of bearer rejected, failed to enable media [ 96.692239][ T5868] pim6reg: entered allmulticast mode [ 96.698360][ T5868] pim6reg: left allmulticast mode [ 96.735326][ T5863] lo speed is unknown, defaulting to 1000 [ 96.813805][ T5873] pim6reg: entered allmulticast mode [ 97.071137][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 97.278572][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 97.403871][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 97.431334][ T5883] tipc: Enabling of bearer rejected, already enabled [ 97.442645][ T5888] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 97.442645][ T5888] program syz.2.602 not setting count and/or reply_len properly [ 97.464016][ T5883] pim6reg: entered allmulticast mode [ 97.470073][ T5883] pim6reg: left allmulticast mode [ 97.499900][ T5886] Cannot find add_set index 0 as target [ 97.519396][ T5890] Cannot find del_set index 2 as target [ 97.550002][ T5894] netlink: 104 bytes leftover after parsing attributes in process `syz.2.605'. [ 97.813836][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 97.916220][ T5904] netlink: 52 bytes leftover after parsing attributes in process `syz.3.607'. [ 97.925938][ T5904] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 97.933773][ T5904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.607'. [ 97.953803][ T5904] team0: Port device geneve1 added [ 97.967547][ T5907] netlink: 76 bytes leftover after parsing attributes in process `syz.2.609'. [ 98.010532][ T5904] netlink: 'syz.3.607': attribute type 27 has an invalid length. [ 98.024270][ T5910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5910 comm=syz.0.617 [ 98.058685][ T5910] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 98.186160][ T5904] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.195033][ T5904] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.203820][ T5904] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.212319][ T5904] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.238604][ T5904] bond1: left promiscuous mode [ 98.243480][ T5904] bond1: left allmulticast mode [ 98.248552][ T5904] geneve2: left allmulticast mode [ 98.258167][ T3521] lo speed is unknown, defaulting to 1000 [ 98.264060][ T3521] syz0: Port: 1 Link DOWN [ 98.364017][ T36] lo speed is unknown, defaulting to 1000 [ 98.472072][ T5907] lo speed is unknown, defaulting to 1000 [ 98.569821][ T5922] pim6reg: entered allmulticast mode [ 98.929080][ T5935] tipc: Enabling of bearer rejected, failed to enable media [ 98.967131][ T5935] pim6reg: left allmulticast mode [ 99.049361][ T5937] ªªªªªª: renamed from vlan0 [ 99.159617][ T5380] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 99.246510][ T5380] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.793795][ T5953] siw: device registration error -23 [ 99.852584][ T5967] vlan1: left promiscuous mode [ 99.857536][ T5967] bridge_slave_0: left promiscuous mode [ 99.863435][ T5967] bridge0: port 1(vlan1) entered disabled state [ 99.908112][ T5972] team0: Port device geneve1 removed [ 99.945123][ T5974] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 99.945123][ T5974] program syz.4.626 not setting count and/or reply_len properly [ 100.017234][ T5970] lo speed is unknown, defaulting to 1000 [ 100.112118][ T5972] lo speed is unknown, defaulting to 1000 [ 100.283996][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 100.284013][ T29] audit: type=1400 audit(1748864909.873:6825): avc: denied { create } for pid=5986 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.375815][ T29] audit: type=1400 audit(1748864909.913:6826): avc: denied { connect } for pid=5986 comm="syz.1.631" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.396438][ T29] audit: type=1400 audit(1748864909.913:6827): avc: denied { ioctl } for pid=5986 comm="syz.1.631" path="socket:[12677]" dev="sockfs" ino=12677 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.421103][ T29] audit: type=1400 audit(1748864909.913:6828): avc: denied { write } for pid=5986 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.465963][ T5985] lo speed is unknown, defaulting to 1000 [ 100.480936][ T5994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.505952][ T5992] tipc: Enabling of bearer rejected, already enabled [ 100.515228][ T5992] pim6reg: left allmulticast mode [ 100.531524][ T29] audit: type=1326 audit(1748864910.073:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.555159][ T29] audit: type=1326 audit(1748864910.073:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.578569][ T29] audit: type=1326 audit(1748864910.073:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.601991][ T29] audit: type=1326 audit(1748864910.073:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.625337][ T29] audit: type=1326 audit(1748864910.073:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.648913][ T29] audit: type=1326 audit(1748864910.073:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f910ca8e969 code=0x7ffc0000 [ 100.848663][ T6004] siw: device registration error -23 [ 100.995815][ T6007] siw: device registration error -23 [ 101.056994][ T6010] pim6reg: left allmulticast mode [ 101.073503][ T6014] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 101.073503][ T6014] program syz.3.639 not setting count and/or reply_len properly [ 101.091133][ T6018] smc: net device bond0 applied user defined pnetid SYZ2 [ 101.099849][ T6017] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 101.121061][ T6018] smc: net device bond0 erased user defined pnetid SYZ2 [ 101.130946][ T6017] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 101.150474][ T6021] xt_hashlimit: size too large, truncated to 1048576 [ 101.157245][ T6021] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 101.171098][ T6017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.343210][ T6027] tipc: Enabling of bearer rejected, already enabled [ 101.407036][ T6027] pim6reg: entered allmulticast mode [ 101.418503][ T6037] pim6reg: left allmulticast mode [ 102.051189][ T6038] lo speed is unknown, defaulting to 1000 [ 102.159119][ T6041] Cannot find add_set index 0 as target [ 102.169231][ T6025] lo speed is unknown, defaulting to 1000 [ 102.183857][ T6043] __nla_validate_parse: 14 callbacks suppressed [ 102.183876][ T6043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.649'. [ 102.272164][ T6049] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.348442][ T6033] lo speed is unknown, defaulting to 1000 [ 102.512372][ T6053] vlan2: entered allmulticast mode [ 102.517656][ T6053] bridge_slave_0: entered allmulticast mode [ 102.538715][ T6053] bridge0: port 1(vlan2) entered blocking state [ 102.545231][ T6053] bridge0: port 1(vlan2) entered disabled state [ 102.554254][ T6053] vlan2: entered promiscuous mode [ 102.559353][ T6053] bridge_slave_0: entered promiscuous mode [ 102.559882][ T6053] bridge0: mtu less than device minimum [ 102.559926][ T6043] lo speed is unknown, defaulting to 1000 [ 102.705130][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 102.715517][ T6055] siw: device registration error -23 [ 102.743928][ T6057] IPv6: Can't replace route, no match found [ 102.795240][ T6066] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 102.795240][ T6066] program syz.2.655 not setting count and/or reply_len properly [ 102.864398][ T6071] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 102.893737][ T6071] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 102.926200][ T6071] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.992604][ T6076] ipvlan2: entered promiscuous mode [ 102.998321][ T6076] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.013755][ T6076] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.064655][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 103.204304][ T6074] lo speed is unknown, defaulting to 1000 [ 103.221010][ T6082] Cannot find add_set index 0 as target [ 103.328470][ T6084] Cannot find del_set index 2 as target [ 103.385009][ T6087] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 103.393328][ T6087] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 103.408179][ T6092] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 103.408179][ T6092] program syz.3.664 not setting count and/or reply_len properly [ 103.485905][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 103.500852][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 103.531148][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 103.540585][ T6099] tipc: Enabling of bearer rejected, failed to enable media [ 103.553452][ T6099] pim6reg: entered allmulticast mode [ 103.559766][ T6099] pim6reg: left allmulticast mode [ 103.565611][ T6101] netlink: 76 bytes leftover after parsing attributes in process `syz.1.668'. [ 103.685014][ T6101] lo speed is unknown, defaulting to 1000 [ 104.147699][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 104.476229][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 104.515428][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 104.570866][ T6122] tipc: Enabling of bearer rejected, failed to enable media [ 104.602322][ T6122] pim6reg: entered allmulticast mode [ 104.617568][ T6122] pim6reg: left allmulticast mode [ 104.669835][ T6125] Cannot find add_set index 0 as target [ 104.783820][ T6128] Cannot find del_set index 2 as target [ 104.865165][ T6131] Cannot find add_set index 0 as target [ 104.931052][ T6134] smc: net device bond0 applied user defined pnetid SYZ2 [ 104.956693][ T6137] vlan2: entered allmulticast mode [ 104.958621][ T6134] smc: net device bond0 erased user defined pnetid SYZ2 [ 104.961883][ T6137] bridge_slave_0: entered allmulticast mode [ 105.004627][ T6137] bridge0: port 1(vlan2) entered blocking state [ 105.011013][ T6137] bridge0: port 1(vlan2) entered disabled state [ 105.034527][ T6137] vlan2: entered promiscuous mode [ 105.039622][ T6137] bridge_slave_0: entered promiscuous mode [ 105.066269][ T6137] bridge0: mtu less than device minimum [ 105.072192][ T6139] tipc: Enabling of bearer rejected, failed to enable media [ 105.098960][ T6141] pim6reg: entered allmulticast mode [ 105.121382][ T6143] pim6reg: left allmulticast mode [ 105.139360][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.155234][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.218985][ T6150] vlan2: left promiscuous mode [ 105.223917][ T6150] bridge_slave_0: left promiscuous mode [ 105.229874][ T6150] bridge0: port 1(vlan2) entered disabled state [ 105.303419][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 105.303435][ T29] audit: type=1326 audit(1748864914.907:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.353216][ T29] audit: type=1326 audit(1748864914.907:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.371232][ T6150] lo speed is unknown, defaulting to 1000 [ 105.376587][ T29] audit: type=1326 audit(1748864914.938:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.405732][ T29] audit: type=1326 audit(1748864914.938:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.429151][ T29] audit: type=1326 audit(1748864914.938:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.452644][ T29] audit: type=1326 audit(1748864914.948:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.476037][ T29] audit: type=1326 audit(1748864914.948:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.499368][ T29] audit: type=1326 audit(1748864914.948:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.522767][ T29] audit: type=1326 audit(1748864914.948:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 105.546187][ T29] audit: type=1400 audit(1748864914.948:7678): avc: denied { mount } for pid=6151 comm="syz.0.682" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.697896][ T6159] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.782106][ T6164] tipc: Enabling of bearer rejected, failed to enable media [ 105.813807][ T6164] pim6reg: entered allmulticast mode [ 105.819391][ T6161] vlan2: left promiscuous mode [ 105.824291][ T6161] bridge_slave_0: left promiscuous mode [ 105.830289][ T6161] bridge0: port 1(vlan2) entered disabled state [ 105.838818][ T6164] pim6reg: left allmulticast mode [ 105.912378][ T6161] lo speed is unknown, defaulting to 1000 [ 106.043724][ T6173] Cannot find add_set index 0 as target [ 106.050599][ T6174] pim6reg: entered allmulticast mode [ 106.066553][ T6174] pim6reg: left allmulticast mode [ 106.143419][ T6182] ipvlan2: entered promiscuous mode [ 106.149303][ T6182] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.151159][ T6182] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.321836][ T6186] tipc: Enabling of bearer rejected, failed to enable media [ 106.323878][ T6179] infiniband syz2: set down [ 106.333072][ T6189] pim6reg: entered allmulticast mode [ 106.334725][ T6179] infiniband syz2: added veth0_to_bond [ 106.345189][ T6186] pim6reg: left allmulticast mode [ 106.367084][ T6179] RDS/IB: syz2: added [ 106.371368][ T6179] smc: adding ib device syz2 with port count 1 [ 106.377599][ T6179] smc: ib device syz2 port 1 has pnetid [ 106.488730][ T6193] tipc: Enabling of bearer rejected, failed to enable media [ 106.512739][ T6193] pim6reg: entered allmulticast mode [ 106.540939][ T6193] pim6reg: left allmulticast mode [ 106.541767][ T6198] binfmt_misc: register: failed to install interpreter file ./file2 [ 106.662723][ T6194] siw: device registration error -23 [ 106.814165][ T6203] siw: device registration error -23 [ 106.962646][ T6220] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 107.003161][ T6223] vlan0: entered allmulticast mode [ 107.008351][ T6223] bridge_slave_0: entered allmulticast mode [ 107.029569][ T6223] bridge0: port 1(vlan0) entered blocking state [ 107.035947][ T6223] bridge0: port 1(vlan0) entered disabled state [ 107.060475][ T6222] Cannot find add_set index 0 as target [ 107.061247][ T6223] vlan0: entered promiscuous mode [ 107.071304][ T6223] bridge_slave_0: entered promiscuous mode [ 107.108363][ T6223] bridge0: mtu less than device minimum [ 107.147195][ T6226] openvswitch: netlink: Message has 6 unknown bytes. [ 107.443053][ T6233] __nla_validate_parse: 21 callbacks suppressed [ 107.443116][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'. [ 107.624239][ T6236] lo speed is unknown, defaulting to 1000 [ 108.001451][ T6241] xt_hashlimit: size too large, truncated to 1048576 [ 108.008196][ T6241] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 108.031125][ T6246] program syz.4.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.351526][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 108.615345][ T6263] siw: device registration error -23 [ 108.647285][ T6269] Cannot find add_set index 0 as target [ 108.753785][ T10] Process accounting resumed [ 108.814654][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 108.827389][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 108.848090][ T6280] tipc: Enabling of bearer rejected, already enabled [ 108.872004][ T6280] pim6reg: entered allmulticast mode [ 108.892119][ T6280] pim6reg: left allmulticast mode [ 108.908230][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 109.187411][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 109.404276][ T6296] Cannot find del_set index 2 as target [ 109.435528][ T6300] netlink: 'syz.1.726': attribute type 1 has an invalid length. [ 109.455854][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 109.460307][ T6302] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.727'. [ 109.473581][ T6300] bond0: entered promiscuous mode [ 109.479090][ T6300] bond0: entered allmulticast mode [ 109.643249][ T6307] geneve2: entered allmulticast mode [ 109.691870][ T6307] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.700236][ T6307] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.708573][ T6307] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.716967][ T6307] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.818817][ T6315] option changes via remount are deprecated (pid=6314 comm=syz.4.729) [ 109.842770][ T6307] bond0: (slave geneve2): making interface the new active one [ 109.850381][ T6307] geneve2: entered promiscuous mode [ 109.890279][ T6335] binfmt_misc: register: failed to install interpreter file ./file2 [ 109.910759][ T6307] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 110.059240][ T6310] lo speed is unknown, defaulting to 1000 [ 110.092834][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 110.151721][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 110.198140][ T6351] tipc: Enabling of bearer rejected, failed to enable media [ 110.260461][ T6353] pim6reg: entered allmulticast mode [ 110.272424][ T6353] pim6reg: left allmulticast mode [ 110.359393][ T29] kauditd_printk_skb: 840 callbacks suppressed [ 110.359408][ T29] audit: type=1326 audit(1748864919.971:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 110.390445][ T29] audit: type=1326 audit(1748864920.001:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce883fe969 code=0x7ffc0000 [ 110.714113][ T6361] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 110.714113][ T6361] program syz.2.737 not setting count and/or reply_len properly [ 110.930382][ T29] audit: type=1400 audit(1748864920.541:8521): avc: denied { write } for pid=6368 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.571996][ T29] audit: type=1400 audit(1748864921.181:8522): avc: granted { setsecparam } for pid=6377 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 111.609545][ T6381] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 111.611138][ T29] audit: type=1326 audit(1748864921.201:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.639630][ T29] audit: type=1326 audit(1748864921.201:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.663043][ T29] audit: type=1326 audit(1748864921.211:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.686415][ T29] audit: type=1326 audit(1748864921.211:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.709790][ T29] audit: type=1326 audit(1748864921.211:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.733135][ T29] audit: type=1326 audit(1748864921.211:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250a4ee969 code=0x7ffc0000 [ 111.830824][ T6392] SELinux: policydb table sizes (4376,16) do not match mine (6,7) [ 111.830879][ T6392] SELinux: failed to load policy [ 111.874420][ T6391] option changes via remount are deprecated (pid=6390 comm=syz.2.745) [ 111.957455][ T6401] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 111.957455][ T6401] program syz.4.748 not setting count and/or reply_len properly [ 112.085089][ T6407] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 112.091655][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.099353][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 112.132631][ T6416] vhci_hcd: connection closed [ 112.132839][ T3425] vhci_hcd: stop threads [ 112.141867][ T3425] vhci_hcd: release socket [ 112.146324][ T3425] vhci_hcd: disconnect device [ 112.817373][ T6433] siw: device registration error -23 [ 113.007624][ T6441] __nla_validate_parse: 7 callbacks suppressed [ 113.007645][ T6441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.760'. [ 113.053391][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 113.114619][ T6448] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 113.114619][ T6448] program syz.4.763 not setting count and/or reply_len properly [ 113.173769][ T6441] lo speed is unknown, defaulting to 1000 [ 113.210896][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 113.263302][ T6462] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 113.263302][ T6462] program syz.4.766 not setting count and/or reply_len properly [ 113.359737][ T6467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.767'. [ 113.405364][ T6469] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 113.488583][ T6467] lo speed is unknown, defaulting to 1000 [ 113.767777][ T6479] lo speed is unknown, defaulting to 1000 [ 114.225596][ T10] Process accounting resumed [ 114.242021][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 114.453335][ T6502] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 114.453335][ T6502] program syz.4.778 not setting count and/or reply_len properly [ 114.589669][ T6511] netlink: 76 bytes leftover after parsing attributes in process `syz.4.781'. [ 114.795445][ T6523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.784'. [ 114.795562][ T6511] lo speed is unknown, defaulting to 1000 [ 114.855957][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 114.864847][ T6515] netlink: 540 bytes leftover after parsing attributes in process `syz.0.783'. [ 114.936430][ T6515] tipc: Enabling of bearer rejected, already enabled [ 115.004030][ T6526] netlink: 76 bytes leftover after parsing attributes in process `syz.0.785'. [ 115.044673][ T6523] lo speed is unknown, defaulting to 1000 [ 115.076013][ T6526] bond0: (slave dummy0): Releasing backup interface [ 115.128417][ T6528] Cannot find del_set index 2 as target [ 115.311254][ T6529] lo speed is unknown, defaulting to 1000 [ 115.431068][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 115.431087][ T29] audit: type=1400 audit(1748864925.033:9144): avc: denied { setopt } for pid=6530 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.477296][ T29] audit: type=1400 audit(1748864925.033:9145): avc: denied { nlmsg_read } for pid=6530 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.555289][ T6537] SELinux: policydb magic number 0x6dda6955 does not match expected magic number 0xf97cff8c [ 115.589774][ T6537] SELinux: failed to load policy [ 115.603923][ T6539] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 115.603923][ T6539] program syz.2.789 not setting count and/or reply_len properly [ 115.739382][ T6549] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 115.739382][ T6549] program syz.3.791 not setting count and/or reply_len properly [ 115.990455][ T6556] lo speed is unknown, defaulting to 1000 [ 116.318896][ T6548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 116.325467][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.333082][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 116.348630][ T6559] vhci_hcd: connection closed [ 116.348916][ T31] vhci_hcd: stop threads [ 116.349319][ T29] audit: type=1326 audit(1748864925.883:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 116.353809][ T31] vhci_hcd: release socket [ 116.353821][ T31] vhci_hcd: disconnect device [ 116.358092][ T29] audit: type=1326 audit(1748864925.883:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 116.358126][ T29] audit: type=1326 audit(1748864925.883:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 116.437542][ T29] audit: type=1326 audit(1748864925.883:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.2.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 116.524531][ T29] audit: type=1326 audit(1748864926.123:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 116.547980][ T29] audit: type=1326 audit(1748864926.123:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 116.572022][ T29] audit: type=1326 audit(1748864926.123:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 116.595449][ T29] audit: type=1326 audit(1748864926.123:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418088e969 code=0x7ffc0000 [ 116.787224][ T6567] siw: device registration error -23 [ 116.827046][ T6575] Cannot find add_set index 0 as target [ 116.889022][ T6579] siw: device registration error -23 [ 116.939775][ T6577] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 116.950428][ T6577] SELinux: failed to load policy [ 117.035458][ T6589] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 117.035458][ T6589] program syz.2.802 not setting count and/or reply_len properly [ 117.072147][ T6588] Cannot find del_set index 2 as target [ 117.152920][ T6596] sg_write: data in/out 1818846731/1 bytes for SCSI command 0x65-- guessing data in; [ 117.152920][ T6596] program syz.2.803 not setting count and/or reply_len properly [ 117.171095][ T6583] lo speed is unknown, defaulting to 1000 [ 117.216753][ T6601] bond0: (slave geneve2): Releasing active interface [ 117.239789][ T6601] geneve2: left promiscuous mode [ 117.265073][ T6601] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.273556][ T6601] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.282056][ T6601] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.290467][ T6601] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.503112][ T6604] lo speed is unknown, defaulting to 1000 [ 118.038515][ T6622] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 118.046358][ T6622] __nla_validate_parse: 5 callbacks suppressed [ 118.046372][ T6622] netlink: 2 bytes leftover after parsing attributes in process `syz.4.809'. [ 118.090825][ T6628] netlink: 'syz.4.809': attribute type 29 has an invalid length. [ 118.093972][ T6624] macvtap1: entered allmulticast mode [ 118.104243][ T6624] veth0_macvtap: entered allmulticast mode [ 118.125033][ T6622] team0: entered promiscuous mode [ 118.131220][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.148416][ T6622] bridge0: port 1(team0) entered blocking state [ 118.154829][ T6622] bridge0: port 1(team0) entered disabled state [ 118.184817][ T6622] team0: entered allmulticast mode [ 118.472541][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.817'. [ 118.766504][ T6649] bond0: (slave dummy0): Releasing backup interface [ 118.792472][ T6649] vlan0: left promiscuous mode [ 118.797393][ T6649] bridge_slave_0: left promiscuous mode [ 118.803231][ T6649] bridge0: port 1(vlan0) entered disabled state [ 118.895514][ T6654] netlink: 'syz.2.822': attribute type 21 has an invalid length. [ 118.903316][ T6654] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.264128][ T6683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 119.270765][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.278422][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 119.279604][ T6681] lo speed is unknown, defaulting to 1000 [ 119.298016][ T6692] vhci_hcd: connection closed [ 119.299527][ T31] vhci_hcd: stop threads [ 119.308576][ T31] vhci_hcd: release socket [ 119.313017][ T31] vhci_hcd: disconnect device [ 119.346174][ T6691] lo speed is unknown, defaulting to 1000 [ 119.388554][ T6696] wireguard0: entered promiscuous mode [ 119.623061][ T6711] Cannot find del_set index 2 as target [ 119.633340][ T6712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 119.639924][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.647748][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 119.685354][ T6713] vhci_hcd: connection closed [ 119.685656][ T3403] vhci_hcd: stop threads [ 119.694744][ T3403] vhci_hcd: release socket [ 119.699245][ T3403] vhci_hcd: disconnect device [ 119.994541][ T6736] Cannot find add_set index 0 as target [ 120.219755][ T6745] Cannot find add_set index 0 as target [ 120.346596][ T6754] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.858'. [ 120.441177][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 120.441197][ T29] audit: type=1326 audit(1748864930.044:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5273565927 code=0x7ffc0000 [ 120.441237][ T29] audit: type=1326 audit(1748864930.044:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f527350ab39 code=0x7ffc0000 [ 120.441328][ T29] audit: type=1326 audit(1748864930.044:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 120.472381][ T29] audit: type=1326 audit(1748864930.084:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5273565927 code=0x7ffc0000 [ 120.472496][ T29] audit: type=1326 audit(1748864930.084:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f527350ab39 code=0x7ffc0000 [ 120.472535][ T29] audit: type=1326 audit(1748864930.084:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 120.497391][ T29] audit: type=1326 audit(1748864930.114:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5273565927 code=0x7ffc0000 [ 120.497420][ T29] audit: type=1326 audit(1748864930.114:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f527350ab39 code=0x7ffc0000 [ 120.497445][ T29] audit: type=1326 audit(1748864930.114:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6755 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f527356e969 code=0x7ffc0000 [ 120.503572][ T29] audit: type=1400 audit(1748864930.114:9797): avc: denied { map_create } for pid=6755 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.772571][ T6764] Cannot find del_set index 2 as target [ 120.828091][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 120.860259][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 120.945302][ T6773] Cannot find add_set index 0 as target [ 121.022957][ T6780] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.869'. [ 121.164453][ T6791] Cannot find del_set index 2 as target [ 121.315569][ T6802] $Hÿ: renamed from bond0 [ 121.354784][ T6802] $Hÿ: entered promiscuous mode [ 121.367781][ T6793] lo speed is unknown, defaulting to 1000 [ 121.381006][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 121.880646][ T6806] lo speed is unknown, defaulting to 1000 [ 121.954561][ T6811] Cannot find del_set index 2 as target [ 122.079567][ T6815] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.882'. [ 122.465104][ T6818] lo speed is unknown, defaulting to 1000 [ 122.694993][ T6836] team0: left allmulticast mode [ 122.722846][ T6836] bridge0: port 1(team0) entered disabled state [ 122.898087][ T6842] lo speed is unknown, defaulting to 1000 [ 122.916309][ T6846] Cannot find del_set index 2 as target [ 123.001144][ T6851] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.893'. [ 123.021813][ T6853] Cannot find add_set index 0 as target [ 123.415745][ T6859] lo speed is unknown, defaulting to 1000 [ 123.541608][ T6882] Cannot find del_set index 2 as target [ 123.549793][ T6880] Cannot find add_set index 0 as target [ 123.647099][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 123.759137][ T6892] netlink: 'syz.3.912': attribute type 21 has an invalid length. [ 123.767139][ T6892] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.953584][ T6906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 123.960160][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.967979][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 124.042783][ T6907] vhci_hcd: connection closed [ 124.043955][ T3403] vhci_hcd: stop threads [ 124.053075][ T3403] vhci_hcd: release socket [ 124.057525][ T3403] vhci_hcd: disconnect device [ 124.095984][ T6900] lo speed is unknown, defaulting to 1000 [ 124.136631][ T6918] Cannot find del_set index 2 as target [ 124.311882][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 124.398277][ T6923] lo speed is unknown, defaulting to 1000 [ 124.781380][ T6947] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.931'. [ 124.893714][ T6952] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.943'. [ 125.061225][ T6938] ÿÿÿÿÿÿ: renamed from vlan1 [ 125.185681][ T6974] Cannot find del_set index 2 as target [ 125.244693][ T6972] lo speed is unknown, defaulting to 1000 [ 125.346338][ T6971] lo speed is unknown, defaulting to 1000 [ 125.426154][ T6978] lo speed is unknown, defaulting to 1000 [ 125.443249][ T29] kauditd_printk_skb: 14424 callbacks suppressed [ 125.443267][ T29] audit: type=1400 audit(1748864935.056:23751): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.478848][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.485468][ T3045] audit: audit_lost=158 audit_rate_limit=0 audit_backlog_limit=64 [ 125.493339][ T3045] audit: backlog limit exceeded [ 125.500755][ T29] audit: type=1400 audit(1748864935.076:23752): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.508347][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.522024][ T29] audit: type=1400 audit(1748864935.076:23753): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.528532][ T3045] audit: audit_lost=159 audit_rate_limit=0 audit_backlog_limit=64 [ 125.549662][ T29] audit: type=1400 audit(1748864935.076:23754): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.557489][ T3045] audit: backlog limit exceeded [ 125.820571][ T6996] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 125.876632][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.894922][ T6996] bond0: (slave team0): Enslaving as an active interface with an up link [ 126.310196][ T7017] lo speed is unknown, defaulting to 1000 [ 126.449118][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 126.468679][ T7022] lo speed is unknown, defaulting to 1000 [ 126.828151][ T7035] lo speed is unknown, defaulting to 1000 [ 126.830392][ T7043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.967'. [ 127.183738][ T7062] netlink: 'syz.3.973': attribute type 13 has an invalid length. [ 127.782584][ T7079] bond0: (slave team0): Releasing backup interface [ 127.837538][ T7076] lo speed is unknown, defaulting to 1000 [ 128.000251][ T7079] lo speed is unknown, defaulting to 1000 [ 128.210354][ T7090] netlink: 'syz.1.982': attribute type 5 has an invalid length. [ 128.293609][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 128.317659][ T7095] netlink: 'syz.0.984': attribute type 4 has an invalid length. [ 128.325431][ T7095] netlink: 17 bytes leftover after parsing attributes in process `syz.0.984'. [ 128.404632][ T7097] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 128.411205][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.418859][ T7097] vhci_hcd vhci_hcd.0: Device attached [ 128.456654][ T7095] wireguard0: entered promiscuous mode [ 128.462344][ T7095] wireguard0: entered allmulticast mode [ 128.486263][ T7103] vhci_hcd: connection closed [ 128.486425][ T3403] vhci_hcd: stop threads [ 128.495537][ T3403] vhci_hcd: release socket [ 128.500058][ T3403] vhci_hcd: disconnect device [ 128.521054][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 128.646606][ T7115] netlink: 'syz.1.991': attribute type 10 has an invalid length. [ 128.716429][ T7122] set match dimension is over the limit! [ 128.797221][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 128.856054][ T7134] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.998'. [ 129.014902][ T7136] lo speed is unknown, defaulting to 1000 [ 129.221769][ T7142] ================================================================== [ 129.229914][ T7142] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 129.238314][ T7142] [ 129.240670][ T7142] write to 0xffff8881050fd54c of 4 bytes by task 7146 on cpu 1: [ 129.248326][ T7142] inode_update_timestamps+0x147/0x270 [ 129.253829][ T7142] file_update_time+0x20e/0x2b0 [ 129.258720][ T7142] shmem_file_write_iter+0x9c/0xf0 [ 129.263864][ T7142] iter_file_splice_write+0x5f2/0x970 [ 129.269299][ T7142] direct_splice_actor+0x156/0x2a0 [ 129.274442][ T7142] splice_direct_to_actor+0x312/0x680 [ 129.279937][ T7142] do_splice_direct+0xda/0x150 [ 129.284735][ T7142] do_sendfile+0x380/0x650 [ 129.289207][ T7142] __x64_sys_sendfile64+0x105/0x150 [ 129.294440][ T7142] x64_sys_call+0xb39/0x2fb0 [ 129.299071][ T7142] do_syscall_64+0xd2/0x200 [ 129.303636][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.309567][ T7142] [ 129.311896][ T7142] read to 0xffff8881050fd54c of 4 bytes by task 7142 on cpu 0: [ 129.319453][ T7142] atime_needs_update+0x2a8/0x3e0 [ 129.324512][ T7142] touch_atime+0x4a/0x340 [ 129.328873][ T7142] shmem_file_splice_read+0x5b1/0x600 [ 129.334295][ T7142] splice_direct_to_actor+0x26c/0x680 [ 129.339695][ T7142] do_splice_direct+0xda/0x150 [ 129.344502][ T7142] do_sendfile+0x380/0x650 [ 129.348971][ T7142] __x64_sys_sendfile64+0x105/0x150 [ 129.354235][ T7142] x64_sys_call+0xb39/0x2fb0 [ 129.358870][ T7142] do_syscall_64+0xd2/0x200 [ 129.363422][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.369352][ T7142] [ 129.371695][ T7142] value changed: 0x314770ee -> 0x31e00d92 [ 129.377438][ T7142] [ 129.379774][ T7142] Reported by Kernel Concurrency Sanitizer on: [ 129.385955][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.4.1001 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 129.398053][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.408142][ T7142] ================================================================== [ 130.452404][ T29] kauditd_printk_skb: 20515 callbacks suppressed [ 130.452423][ T29] audit: type=1400 audit(1748864940.056:44054): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.460873][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.480017][ T29] audit: type=1400 audit(1748864940.066:44055): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.480051][ T29] audit: type=1400 audit(1748864940.066:44056): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.486565][ T3045] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 130.507686][ T29] audit: type=1400 audit(1748864940.066:44057): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.528908][ T3045] audit: backlog limit exceeded [ 130.536749][ T29] audit: type=1400 audit(1748864940.066:44058): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.558651][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.562687][ T29] audit: type=1400 audit(1748864940.066:44059): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.460899][ T29] kauditd_printk_skb: 47808 callbacks suppressed [ 135.460915][ T29] audit: type=1400 audit(1748864945.067:90264): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.475839][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.488781][ T29] audit: type=1400 audit(1748864945.077:90265): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.495077][ T3045] audit: audit_lost=768 audit_rate_limit=0 audit_backlog_limit=64 [ 135.495095][ T3045] audit: backlog limit exceeded [ 135.495318][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.516276][ T29] audit: type=1400 audit(1748864945.077:90266): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.524174][ T3045] audit: audit_lost=769 audit_rate_limit=0 audit_backlog_limit=64 [ 135.524197][ T3045] audit: backlog limit exceeded [ 135.529043][ T29] audit: type=1400 audit(1748864945.077:90267): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0