last executing test programs: 4.108603254s ago: executing program 1 (id=827): unshare(0x68040200) socket(0x2, 0x80805, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001840), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2504000000080002000300000014000500fe880000000000000000000000000101080007007f000001"], 0x38}}, 0x40c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff01000026130f014f8ef9528a898500000000000000850000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r5 = syz_io_uring_setup(0x1f8c, &(0x7f0000000100)={0x0, 0xd598, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}) io_uring_enter(r5, 0x749d, 0x4, 0x0, 0x0, 0x0) 3.759002666s ago: executing program 2 (id=834): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) close(r7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 3.539113475s ago: executing program 1 (id=836): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x20}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r5) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) 3.535049456s ago: executing program 2 (id=837): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.323083976s ago: executing program 0 (id=839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5d, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = gettid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r3, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000081010000040000000002000000000000c6b7cbe763b401010000c8e8ecf807c1558d7fab665d760c89fe12f55cc9", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/28], 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x120404, &(0x7f0000000180), 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r5) unshare(0x22020400) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) 3.251124932s ago: executing program 0 (id=840): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r2, 0x0, 0xe17}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f06ebbee2, 0x803f, 0xffffffffffffffff, 0x5d591000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 3.199058157s ago: executing program 0 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x373, &(0x7f0000000640)="$eJzs3c9rI2UYwPEn03S2zbJNDqKoSB/ci16GNnoWg7SwEHDpbsRdQZjdTjRkTEomVCNi05NX8e5J8LDszQUPC7r/QC/e9CKCt14ED+5BHZlfzeRXk43pRrffD5RM3vd9Ju/kfVOeN+3MHL/9+Qf1qmdV7bYYKyoZEZGHIgUxJJGJH41w25S0rrx88fcfX7h2o7ISFeh26forRVVdW//uw09W42b3L8hR4d3j34q/Hj199Ozx39ffr3la87TRbKutt5o/t+1brqO7Na9uqV51HdtztNbwnFZU/028H7e5t9dRu7F7KbfXcjxP7UZH605H201ttzpqv2fXGmpZll7KCSap3NnZsUszBt+ec2dwRlqtkr0kIqtDNZU7C+kQAABYqMH83whS+lny/5uyVi5v7WjQuJf/333xQfviW/fW4vz/vjkq/3/1p2hfffl/sJzo5f/NaH1QnZz/fymPkP8PZ0Tny8z5f+EMOoPZrJtDRZm+Z0H+n4s/v6HDd+5uhBvk/wAAAAAAAAAAAAAAAAAAAAAA/B889P287/v55DH56Z1CED/HE2nc+F8QkZVg9H3G/0l27cZNWQlP3AvG2P1sv7JfiR7jBg9ExBXnL39QMDeSM480UJDv3YM4/mC/shTWlKpSC+JlU/JSCOdTKt73t6+UtzY1EsefnKaUS8cXJS9PpeO/DWfn9pXnt4r98fHrm/LS5VS8JXn54bY0xZXdMLL3+p9uqr7xZnkgfjVsJyK/PPZBAQAAAABgzixVNXX8+t2yNDFQH11lpFQNvyZyZEPy8me4pjair4166+uNkevzbP657KKPHgAAAACA88HrfFy3xXBa4YbrjtpYlbFVc9jI9pUsi8jIxuZAyfJpe15KHeG0/TEluoPJvz2ur5J39VGikn+kCDp+UhXfUUVm609y/GFJJjv7MGW6Ek6AbrrKkCnCs4OdXw8KdGTjy2P3cxgfyElJ8rWROeZ9lqvD+zFOmQnLQyV+ZrYJ8MwXX/8xvw/Ia/fiGfDR5MaHruMfyDSDMrARvMRw1fKZ/+IBAAAA8Nj1kv6k5PV0dfpGIumb5fCXewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5mjSFcK6p7Yxp7rS2KKPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiv+CcAAP//HJjtsw==") r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semget$private(0x0, 0x4000, 0x555) setreuid(0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.996092836s ago: executing program 1 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x18, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(r1, &(0x7f0000000300)='sessionid\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x5, 0x80000001, {{0x42, 0x4, 0x1, 0x6, 0x108, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@end, @cipso={0x86, 0x44, 0x3, [{0x5, 0x12, "7a0cda4acead82196aec063247b44677"}, {0x0, 0x10, "5024e143f84953a973106e412c05"}, {0x3, 0x6, "ede98b24"}, {0x1, 0x4, "9655"}, {0x5, 0x7, "ea33a6aef5"}, {0x0, 0xb, "0324fdc5c6e1f62dc2"}]}, @generic={0x7, 0x8, "4860b22fa69f"}, @timestamp_prespec={0x44, 0x44, 0x94, 0x3, 0xf, [{@multicast1, 0x1f79}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x89e4}, {@rand_addr=0x64010101, 0x1ff}, {@empty, 0x292}, {@loopback, 0x2}, {@empty, 0x4}, {@private=0xa010101, 0x7}]}, @generic={0x83, 0xf, "927a655e448fd35b263be4a7c5"}, @ssrr={0x89, 0x1b, 0x54, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @local, @multicast2]}, @end, @timestamp_addr={0x44, 0x34, 0xf4, 0x1, 0x4, [{@rand_addr=0x64010100}, {@private=0xa010101, 0x3}, {@local, 0x80000001}, {@remote, 0x6}, {@multicast2, 0x1}, {@local}]}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2.515168279s ago: executing program 3 (id=843): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010029bd70000000000002202000000000ed56070020"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 2.51446521s ago: executing program 4 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010029bd70000000000002202000000000ed56070020"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 2.453847546s ago: executing program 2 (id=846): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9110b7000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.411577989s ago: executing program 3 (id=847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\rtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e00010077697265677561"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x20000000000002d0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 2.40869583s ago: executing program 4 (id=848): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x200000000000000, 0x0, 0x8ffff) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000}, 0x20) socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setpriority(0x0, 0x0, 0x200000000000000) 2.360932434s ago: executing program 1 (id=849): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20000800) ptrace(0x10, 0x0) tkill(0x0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) tkill(0x0, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 2.360411254s ago: executing program 3 (id=850): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.209077298s ago: executing program 2 (id=851): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x7, 0x40, 0xec5, 0xffff, {{0xa, 0x4, 0x2, 0xe, 0x28, 0x68, 0x0, 0xfe, 0x29, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xc2, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1]}]}}}}}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x64000680) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xc, 0x6, 0x7ffc1ff8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x99}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000800)=""/245) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2.202977189s ago: executing program 0 (id=861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20048000) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r3}}, 0x30) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.682422126s ago: executing program 4 (id=852): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xb0, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4050}, 0x20400c0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) ioctl$sock_netdev_private(r8, 0x89fd, &(0x7f0000000400)="d6936fe988814adf9e094a16cb6b7908c8268bed0b1a8009bf") sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.601231223s ago: executing program 0 (id=853): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e7c0a92dd701a07, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x10, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x9, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1100002207020004005e2f242c00000000"], 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f00006d8000/0x3000)=nil, 0x3000, 0x100000b, 0x20010, 0xffffffffffffffff, 0x10000000) mincore(&(0x7f0000197000/0x1000)=nil, 0x1000, &(0x7f0000001140)=""/172) 1.391125933s ago: executing program 3 (id=854): socket(0x5, 0x800, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x5}, 0x28) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000001940)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x2000, @initdev={0xac, 0x1e, 0xfd, 0x0}}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x2}, 0x10}, 0x94) 1.342153387s ago: executing program 4 (id=855): r0 = gettid() rt_sigsuspend(0x0, 0x0) tkill(r0, 0x7) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x14122, 0x0, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = semget$private(0x0, 0x7, 0x180) semop(r2, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x3000}], 0x1) semtimedop(r2, &(0x7f0000000140)=[{0x4, 0x6000}], 0x1, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1806000000000000000000000000000095000000000000002de21270bde2c47510a3fe3d9fd2b3bb6c987dd438ddf0ad339b1490d713c3075af839f78e0a4f1f0d04e8b27f3edf936680432ad82258f37e2b1b3ea3fda018cfec34389948b8633410"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x40, '\x00', r3, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 1.282492413s ago: executing program 1 (id=856): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.144900536s ago: executing program 4 (id=857): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) shutdown(r6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000004c0)={0x20000, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x4e20, 0x59b, @remote, 0xc}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 949.085033ms ago: executing program 2 (id=858): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010029bd70000000000002202000000000ed56070020"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 388.624605ms ago: executing program 2 (id=859): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r1, 0x0, 0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r3 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="725bf64baf179c5118f9ee53ba50c88cf2b403b8c0d23f8c4635c8a652bc3a"], 0x48) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40) r7 = accept$nfc_llcp(r1, &(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x8, &(0x7f0000000240)=[{0x2, 0x7}, {0xd, 0x7, 0x1, 0x40}, {0x28, 0x1, 0x1, 0x7f}, {0x7, 0x8, 0x2a, 0x9afe}, {0x101, 0x5, 0xfd, 0x8}, {0x3, 0x80, 0x4, 0x6}, {0x4, 0x3, 0x3, 0x83}, {0x4, 0x8, 0x6, 0x7}]}) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0xffffffffffffffff, &(0x7f00000000c0)) 388.352035ms ago: executing program 4 (id=860): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0, 0xff, 0x0, &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000013c0)=""/50, 0x32}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) setuid(0xee01) r3 = semget$private(0x0, 0x4, 0x29b) semop(r3, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) 386.070315ms ago: executing program 3 (id=862): perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bfffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x91, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xe985}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201030000000000000000000a000000180001801400018008000100ac141422085df9000200ac146401f2117f098f09ca77368308c9243ffde913f9104aa741658b4bb02b971ad4b8633b6805b60fc0b0ae219a79c95539096135a1b8873d78ac9e2a43e80719636a198e36cae614784562406dadccfeeb3c3249691ce1a026b6762f298319422551352a5d73bf2d2aaabc0a2fb05203e1f10c7595ff33f3047beb5a5b10c88b7fce15713427bcecf464d64b57c5a96f49e3"], 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000004c9e357fb299c997af00800d03000000000000000000000905000000004000000000000a02000000000000000000000b000000000000000000"], 0x0, 0x56}, 0x28) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01001d00c9a44794696e13978e6f42784ab1000000000000020000000982010073797a30000000"], 0x20}}, 0x0) r9 = semget$private(0x0, 0x2, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) semctl$IPC_INFO(r9, 0x3, 0x3, &(0x7f0000000c00)=""/4096) 191.381553ms ago: executing program 1 (id=863): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x2200018, &(0x7f0000000d00)=ANY=[], 0x1, 0x364, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000069116f00000000008510000002000000850000000a00000095000000000000009500a5050000000060dc2b0c171e4329c82370ff6d4775b022caa300005f2179cc3c4488fb07ad9bcb81b292fe9c579bce5786bfe60f447dca7996f8e56dd7c61cf1afaf0114ece2dbce"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000001400)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) select(0x4, &(0x7f0000000000), &(0x7f00000014c0)={0x1}, 0x0, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 23.279398ms ago: executing program 3 (id=864): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x2, &(0x7f0000000640)=""/177, 0xb1) socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x100000000001}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1827}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) fadvise64(r3, 0x807f, 0x1000000, 0x4) 0s ago: executing program 0 (id=865): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x2400c014) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f00000004c0)="88", 0x1}, {&(0x7f0000000100)='\b', 0x1}], 0x2, 0xb) fcntl$setpipe(r0, 0x407, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r9, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): : 'syz.3.283': attribute type 3 has an invalid length. [ 71.811165][ T4818] loop3: detected capacity change from 0 to 2048 [ 71.963366][ T4818] loop3: p1 < > p4 [ 71.967818][ T4818] loop3: p4 size 8388608 extends beyond EOD, truncated [ 72.039167][ T4822] 9p: Bad value for 'rfdno' [ 72.419411][ T4820] loop3: detected capacity change from 0 to 4096 [ 72.864455][ T4839] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 72.892427][ T4839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.899455][ T4845] loop3: detected capacity change from 0 to 128 [ 72.926557][ T4839] bond0: (slave dummy0): Releasing backup interface [ 72.949535][ T4839] bond1: (slave dummy0): making interface the new active one [ 72.964965][ T4839] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 72.981469][ T4845] __nla_validate_parse: 2 callbacks suppressed [ 72.981484][ T4845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.293'. [ 72.997157][ T4854] loop2: detected capacity change from 0 to 1024 [ 73.005100][ T4854] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.096383][ T4845] syz.3.293: attempt to access beyond end of device [ 73.096383][ T4845] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 73.139433][ T4854] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.302: Invalid block bitmap block 0 in block_group 0 [ 73.153669][ T4852] bond1 (unregistering): (slave dummy0): Releasing active interface [ 73.166364][ T4845] syz.3.293: attempt to access beyond end of device [ 73.166364][ T4845] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 73.180121][ T4845] syz.3.293: attempt to access beyond end of device [ 73.180121][ T4845] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 73.182502][ T4852] bond1 (unregistering): Released all slaves [ 73.194252][ T4845] syz.3.293: attempt to access beyond end of device [ 73.194252][ T4845] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 73.211335][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.302: Failed to acquire dquot type 0 [ 73.242040][ T4845] syz.3.293: attempt to access beyond end of device [ 73.242040][ T4845] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 73.256872][ T4845] syz.3.293: attempt to access beyond end of device [ 73.256872][ T4845] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 73.277807][ T4854] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.302: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.292448][ T4845] syz.3.293: attempt to access beyond end of device [ 73.292448][ T4845] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 73.319306][ T4854] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.302: Invalid inode bitmap blk 0 in block_group 0 [ 73.332124][ T414] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 73.360572][ T4854] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 73.384796][ T4854] EXT4-fs (loop2): 1 orphan inode deleted [ 73.405199][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.481876][ T4870] loop1: detected capacity change from 0 to 164 [ 73.555743][ T4873] 9p: Bad value for 'rfdno' [ 73.572492][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.732507][ T4881] loop0: detected capacity change from 0 to 128 [ 73.776446][ T4881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 74.265079][ T4874] loop3: detected capacity change from 0 to 8192 [ 74.284757][ T29] kauditd_printk_skb: 1393 callbacks suppressed [ 74.284772][ T29] audit: type=1326 audit(74.264:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.335368][ T4874] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.377093][ T29] audit: type=1326 audit(74.304:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.399796][ T29] audit: type=1326 audit(74.304:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.422486][ T29] audit: type=1326 audit(74.304:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.445190][ T29] audit: type=1326 audit(74.304:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.467914][ T29] audit: type=1326 audit(74.304:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.490675][ T29] audit: type=1326 audit(74.304:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.566571][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 74.950147][ T4919] bridge0: port 3(macsec2) entered blocking state [ 74.956810][ T4919] bridge0: port 3(macsec2) entered disabled state [ 74.963450][ T29] audit: type=1326 audit(74.904:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 74.986151][ T29] audit: type=1326 audit(74.904:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 75.021781][ T4919] macsec2: entered allmulticast mode [ 75.027299][ T4919] bridge0: entered allmulticast mode [ 75.072166][ T4919] macsec2: left allmulticast mode [ 75.077361][ T4919] bridge0: left allmulticast mode [ 75.092652][ T4929] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 75.103952][ T4928] loop3: detected capacity change from 0 to 1024 [ 75.116777][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.136748][ T4929] bond0: (slave dummy0): Releasing backup interface [ 75.157782][ T4928] EXT4-fs: Mount option(s) incompatible with ext3 [ 75.166215][ T4929] bond1: (slave dummy0): making interface the new active one [ 75.203046][ T4929] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.213759][ T29] audit: type=1326 audit(75.194:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 75.303116][ T4936] bond1 (unregistering): (slave dummy0): Releasing active interface [ 75.315860][ T4936] bond1 (unregistering): Released all slaves [ 75.478347][ T4962] 9p: Bad value for 'rfdno' [ 75.495571][ T4964] loop0: detected capacity change from 0 to 1024 [ 75.512141][ T4964] EXT4-fs: inline encryption not supported [ 75.547951][ T4964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.610792][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 75.619785][ T4951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 75.628959][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 75.641252][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 75.750996][ T4964] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.315: Allocating blocks 385-513 which overlap fs metadata [ 75.864275][ T4964] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 75.876692][ T4963] EXT4-fs (loop0): pa ffff888107e364d0: logic 16, phys. 129, len 24 [ 75.884770][ T4963] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 76.026146][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.070441][ T4996] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 76.120909][ T5000] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 76.130411][ T4996] team0: Failed to send options change via netlink (err -105) [ 76.130491][ T4996] team0: Port device dummy0 added [ 76.158643][ T5000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 76.179158][ T5000] team0: Failed to send options change via netlink (err -105) [ 76.189590][ T5000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 76.198171][ T4996] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 76.203607][ T5000] team0: Port device dummy0 removed [ 76.206018][ T4996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.324'. [ 76.216777][ T5000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.298810][ T5008] bridge0: entered promiscuous mode [ 76.306021][ T5008] bridge0: port 3(macsec1) entered blocking state [ 76.312541][ T5008] bridge0: port 3(macsec1) entered disabled state [ 76.319253][ T5008] macsec1: entered allmulticast mode [ 76.324724][ T5008] bridge0: entered allmulticast mode [ 76.333217][ T5008] macsec1: left allmulticast mode [ 76.338307][ T5008] bridge0: left allmulticast mode [ 76.397883][ T5008] bridge0: left promiscuous mode [ 76.407766][ T5012] loop0: detected capacity change from 0 to 1024 [ 76.470111][ T5012] EXT4-fs: Mount option(s) incompatible with ext3 [ 76.488652][ T5015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 76.497643][ T5015] netlink: 'syz.4.327': attribute type 3 has an invalid length. [ 76.700345][ T5025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5025 comm=wg1 [ 76.716881][ T5025] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 76.729782][ T5030] 9p: Bad value for 'rfdno' [ 76.849792][ T5038] loop2: detected capacity change from 0 to 256 [ 77.025743][ T5038] syz.2.334: attempt to access beyond end of device [ 77.025743][ T5038] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 77.079883][ T5038] syz.2.334: attempt to access beyond end of device [ 77.079883][ T5038] loop2: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 77.135182][ T5045] syz.2.334: attempt to access beyond end of device [ 77.135182][ T5045] loop2: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 77.609007][ T5057] loop2: detected capacity change from 0 to 512 [ 77.936571][ T5057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.104846][ T5069] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 78.733340][ T5078] 9p: Bad value for 'rfdno' [ 78.771822][ T5081] __nla_validate_parse: 5 callbacks suppressed [ 78.771839][ T5081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.344'. [ 78.771933][ T5081] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 78.832798][ T5086] loop0: detected capacity change from 0 to 512 [ 78.838997][ T5086] EXT4-fs (loop0): 1 truncate cleaned up [ 78.848819][ T5086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.968125][ T5090] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 78.979296][ T5089] loop4: detected capacity change from 0 to 512 [ 79.015417][ T5089] EXT4-fs (loop4): 1 truncate cleaned up [ 79.021511][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.230811][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.287148][ T5095] loop3: detected capacity change from 0 to 2048 [ 79.333751][ T29] kauditd_printk_skb: 960 callbacks suppressed [ 79.333766][ T29] audit: type=1326 audit(79.284:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e77e65e7 code=0x7ffc0000 [ 79.362571][ T29] audit: type=1326 audit(79.284:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29e778b829 code=0x7ffc0000 [ 79.385139][ T29] audit: type=1326 audit(79.284:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 79.407603][ T29] audit: type=1326 audit(79.294:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e77e65e7 code=0x7ffc0000 [ 79.430384][ T29] audit: type=1326 audit(79.294:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29e778b829 code=0x7ffc0000 [ 79.452938][ T29] audit: type=1326 audit(79.294:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 79.475462][ T29] audit: type=1326 audit(79.304:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e77e65e7 code=0x7ffc0000 [ 79.498170][ T29] audit: type=1326 audit(79.304:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29e778b829 code=0x7ffc0000 [ 79.520724][ T29] audit: type=1326 audit(79.304:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 79.543405][ T29] audit: type=1326 audit(79.314:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e77e65e7 code=0x7ffc0000 [ 79.612576][ T5098] loop1: detected capacity change from 0 to 1024 [ 79.891837][ T5107] loop3: detected capacity change from 0 to 1024 [ 79.931835][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.950118][ T5107] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.966766][ T4971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 80.020921][ T5107] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.351: Invalid block bitmap block 0 in block_group 0 [ 80.167602][ T5107] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.351: Failed to acquire dquot type 0 [ 80.185767][ T5107] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.351: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.217352][ T5098] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.228552][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.271273][ T5098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 80.291071][ T5098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.300105][ T5107] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.351: Invalid inode bitmap blk 0 in block_group 0 [ 80.312989][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 80.313435][ T5107] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 80.333572][ T5107] EXT4-fs (loop3): 1 orphan inode deleted [ 80.339864][ T5107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.353815][ T5113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.362883][ T5098] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.346: Failed to acquire dquot type 0 [ 80.375479][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.387062][ T5113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.396126][ T5113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.400630][ T5098] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.346: Failed to acquire dquot type 0 [ 80.405151][ T5113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.426141][ T5098] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.346: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.435838][ T5113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.449043][ T5098] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.346: Failed to acquire dquot type 0 [ 80.460542][ T5098] EXT4-fs (loop1): 1 orphan inode deleted [ 80.505223][ T5098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.548478][ T5084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.558531][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.633925][ T5126] loop0: detected capacity change from 0 to 256 [ 80.745900][ T5126] bio_check_eod: 1 callbacks suppressed [ 80.745919][ T5126] syz.0.368: attempt to access beyond end of device [ 80.745919][ T5126] loop0: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 80.770730][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 80.816517][ T5126] syz.0.368: attempt to access beyond end of device [ 80.816517][ T5126] loop0: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 80.843546][ T5136] syz.0.368: attempt to access beyond end of device [ 80.843546][ T5136] loop0: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 80.859395][ T5136] syz.0.368: attempt to access beyond end of device [ 80.859395][ T5136] loop0: rw=8423425, sector=352, nr_sectors = 5 limit=256 [ 81.285442][ T5143] loop2: detected capacity change from 0 to 1024 [ 81.285779][ T5142] 9p: Bad value for 'rfdno' [ 81.301216][ T5143] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.435471][ T5143] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 81.470534][ T5143] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.602471][ T5143] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.369: Failed to acquire dquot type 0 [ 81.666983][ T5143] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.369: Failed to acquire dquot type 0 [ 81.678630][ T5143] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.369: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.726029][ T5143] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.369: Failed to acquire dquot type 0 [ 81.753015][ T5143] EXT4-fs (loop2): 1 orphan inode deleted [ 81.759436][ T5143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.806961][ T5156] loop4: detected capacity change from 0 to 512 [ 81.814759][ T5156] netlink: 'syz.4.362': attribute type 4 has an invalid length. [ 81.846755][ T5129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.076156][ T5164] loop3: detected capacity change from 0 to 512 [ 82.106259][ T5158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 82.115208][ T5158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 82.180696][ T5177] loop0: detected capacity change from 0 to 512 [ 82.189677][ T5164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.193800][ T5177] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.380: error while reading EA inode 32 err=-116 [ 82.241698][ T5177] EXT4-fs (loop0): Remounting filesystem read-only [ 82.248918][ T5177] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 82.310174][ T5177] EXT4-fs (loop0): 1 orphan inode deleted [ 82.328004][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.376671][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.463756][ T5177] kernel profiling enabled (shift: 63) [ 82.469291][ T5177] profiling shift: 63 too large [ 82.683944][ T5187] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.999568][ T5242] netlink: 'syz.0.378': attribute type 298 has an invalid length. [ 83.023206][ T5242] loop0: detected capacity change from 0 to 1024 [ 83.049319][ T5242] EXT4-fs: inline encryption not supported [ 83.055395][ T5242] EXT4-fs: Ignoring removed orlov option [ 83.093541][ T5242] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 83.193390][ T5247] netlink: 'syz.1.390': attribute type 3 has an invalid length. [ 83.201191][ T5247] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 83.250769][ T5242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.586991][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.690035][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.751521][ T5275] loop4: detected capacity change from 0 to 1024 [ 83.758848][ T5275] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.770665][ T5275] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.778998][ T5275] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.786822][ T5275] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.379: Failed to acquire dquot type 0 [ 83.798518][ T5275] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.379: Failed to acquire dquot type 0 [ 83.810313][ T5275] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.379: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.832079][ T5275] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.379: Failed to acquire dquot type 0 [ 83.843707][ T5275] EXT4-fs (loop4): 1 orphan inode deleted [ 83.850206][ T5275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.877975][ T5244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.019127][ T5298] __nla_validate_parse: 4 callbacks suppressed [ 84.019140][ T5298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.386'. [ 84.023079][ T5299] bridge0: port 3(macsec1) entered blocking state [ 84.025469][ T5298] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 84.034296][ T5299] bridge0: port 3(macsec1) entered disabled state [ 84.040153][ T5299] macsec1: entered allmulticast mode [ 84.060388][ T5299] bridge0: entered allmulticast mode [ 84.067493][ T5299] macsec1: left allmulticast mode [ 84.072583][ T5299] bridge0: left allmulticast mode [ 84.104970][ T5302] loop4: detected capacity change from 0 to 1024 [ 84.133513][ T5302] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.140102][ T5309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'. [ 84.149063][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 84.158040][ T5309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'. [ 84.178324][ T5309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'. [ 84.253890][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 84.276798][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 84.354893][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 84.354974][ T29] audit: type=1326 audit(84.334:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.411260][ T5340] loop4: detected capacity change from 0 to 512 [ 84.445258][ T5340] EXT4-fs (loop4): 1 truncate cleaned up [ 84.454281][ T29] audit: type=1326 audit(84.334:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.472634][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.477421][ T29] audit: type=1326 audit(84.334:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.511722][ T29] audit: type=1326 audit(84.334:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.534524][ T29] audit: type=1326 audit(84.334:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.557362][ T29] audit: type=1326 audit(84.334:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.557873][ T5340] netlink: 9 bytes leftover after parsing attributes in process `syz.4.394'. [ 84.580023][ T29] audit: type=1326 audit(84.334:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8995f5f749 code=0x7ffc0000 [ 84.611659][ T29] audit: type=1400 audit(84.404:10234): avc: denied { append } for pid=5337 comm="syz.2.393" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.634408][ T29] audit: type=1400 audit(84.404:10235): avc: denied { open } for pid=5337 comm="syz.2.393" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.657364][ T29] audit: type=1400 audit(84.404:10236): avc: denied { ioctl } for pid=5337 comm="syz.2.393" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.722582][ T5348] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.735537][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.774150][ T5348] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.787332][ T5350] loop0: detected capacity change from 0 to 512 [ 84.795422][ T5350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.813285][ T5350] EXT4-fs (loop0): too many log groups per flexible block group [ 84.821440][ T5350] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 84.828790][ T5350] EXT4-fs (loop0): mount failed [ 84.843396][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.869608][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.891947][ T5348] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.914127][ T5348] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.980796][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995059][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011660][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.020381][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737666][ T5390] loop3: detected capacity change from 0 to 1024 [ 85.744888][ T5390] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.756255][ T5390] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.764391][ T5390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.771399][ T5390] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.399: Failed to acquire dquot type 0 [ 85.782907][ T5390] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.399: Failed to acquire dquot type 0 [ 85.794339][ T5390] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.399: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.808138][ T5390] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.399: Failed to acquire dquot type 0 [ 85.821094][ T5390] EXT4-fs (loop3): 1 orphan inode deleted [ 85.827525][ T5390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.852287][ T5390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.889441][ T5394] loop3: detected capacity change from 0 to 256 [ 85.920249][ T5394] syz.3.400: attempt to access beyond end of device [ 85.920249][ T5394] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 85.935229][ T5394] syz.3.400: attempt to access beyond end of device [ 85.935229][ T5394] loop3: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 85.950667][ T5395] loop4: detected capacity change from 0 to 128 [ 85.980439][ T5394] syz.3.400: attempt to access beyond end of device [ 85.980439][ T5394] loop3: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 86.022550][ T5394] syz.3.400: attempt to access beyond end of device [ 86.022550][ T5394] loop3: rw=8423425, sector=352, nr_sectors = 5 limit=256 [ 86.055006][ T5395] syz.4.401: attempt to access beyond end of device [ 86.055006][ T5395] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 86.080408][ T5395] syz.4.401: attempt to access beyond end of device [ 86.080408][ T5395] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 86.094656][ T5395] syz.4.401: attempt to access beyond end of device [ 86.094656][ T5395] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 86.108561][ T5395] syz.4.401: attempt to access beyond end of device [ 86.108561][ T5395] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 86.122531][ T5395] syz.4.401: attempt to access beyond end of device [ 86.122531][ T5395] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 86.136463][ T5395] syz.4.401: attempt to access beyond end of device [ 86.136463][ T5395] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 86.263635][ T5408] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 86.272558][ T5409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 86.279109][ T5409] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.283872][ T5408] bond1: entered promiscuous mode [ 86.287704][ T5409] vhci_hcd vhci_hcd.0: Device attached [ 86.302112][ T5408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.327361][ T5408] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 86.335174][ T5408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.404'. [ 86.398439][ T5409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5409 comm=syz.3.416 [ 86.422734][ T5409] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 86.426446][ T5406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.431123][ T5409] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 86.431284][ T5409] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.416'. [ 86.490797][ T5416] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 86.601769][ T23] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 86.619209][ T5411] vhci_hcd: connection reset by peer [ 86.624944][ T414] vhci_hcd vhci_hcd.3: stop threads [ 86.630192][ T414] vhci_hcd vhci_hcd.3: release socket [ 86.635638][ T414] vhci_hcd vhci_hcd.3: disconnect device [ 87.029032][ T5458] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.411: error while reading EA inode 32 err=-116 [ 87.142196][ T5458] EXT4-fs (loop4): Remounting filesystem read-only [ 87.201491][ T5458] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 87.261500][ T5458] EXT4-fs (loop4): 1 orphan inode deleted [ 87.283746][ T5458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.357341][ T5478] set_capacity_and_notify: 3 callbacks suppressed [ 87.357359][ T5478] loop2: detected capacity change from 0 to 1024 [ 87.374070][ T5481] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 87.381829][ T5481] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 87.389483][ T5481] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 87.397193][ T5481] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 87.460092][ T5473] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 87.632539][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.742516][ T5491] loop4: detected capacity change from 0 to 1024 [ 87.768436][ T5493] loop3: detected capacity change from 0 to 512 [ 87.779939][ T5491] EXT4-fs: Ignoring removed bh option [ 87.814427][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.832314][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.953707][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.992134][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.408706][ T5512] loop3: detected capacity change from 0 to 1024 [ 88.415904][ T5512] EXT4-fs: test_dummy_encryption option not supported [ 88.430752][ T5512] bond0: (slave bond_slave_1): Releasing backup interface [ 88.461337][ T5512] netlink: 'syz.3.426': attribute type 4 has an invalid length. [ 88.506761][ T5516] loop2: detected capacity change from 0 to 512 [ 88.542862][ T5516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.603433][ T5516] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 2: comm syz.2.425: invalid block [ 88.620073][ T5521] loop3: detected capacity change from 0 to 512 [ 88.627771][ T5521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.655143][ T5521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.673517][ T5521] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.427: resize_inode disabled but reserved GDT blocks non-zero [ 88.688201][ T5516] EXT4-fs (loop2): Remounting filesystem read-only [ 88.704846][ T5516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.720238][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.746289][ T5516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.829221][ T5526] rdma_rxe: rxe_newlink: failed to add lo [ 89.515763][ T5521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.558038][ T5536] loop2: detected capacity change from 0 to 128 [ 89.846209][ T29] kauditd_printk_skb: 2079 callbacks suppressed [ 89.846223][ T29] audit: type=1326 audit(89.824:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.879570][ T29] audit: type=1326 audit(89.834:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.902490][ T29] audit: type=1326 audit(89.834:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.925237][ T29] audit: type=1326 audit(89.834:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.948073][ T29] audit: type=1326 audit(89.834:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.970935][ T29] audit: type=1326 audit(89.834:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 89.993780][ T29] audit: type=1326 audit(89.834:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 90.016509][ T29] audit: type=1326 audit(89.834:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 90.039264][ T29] audit: type=1326 audit(89.854:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 90.062047][ T29] audit: type=1326 audit(89.854:12319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 90.106490][ T5542] __nla_validate_parse: 5 callbacks suppressed [ 90.106506][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 90.143632][ T5546] IPVS: length: 101 != 813667928 [ 90.151654][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 90.160578][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 90.169960][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 90.204621][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.214052][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.332116][ T5551] loop1: detected capacity change from 0 to 512 [ 90.492982][ T5565] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 90.533579][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 90.542526][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 90.552501][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 90.569768][ T5565] bridge0: port 3(gretap0) entered blocking state [ 90.576294][ T5565] bridge0: port 3(gretap0) entered disabled state [ 90.583926][ T5565] gretap0: entered allmulticast mode [ 90.589814][ T5565] gretap0: entered promiscuous mode [ 90.595684][ T5565] bridge0: port 3(gretap0) entered blocking state [ 90.602225][ T5565] bridge0: port 3(gretap0) entered forwarding state [ 90.631355][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 90.680162][ T5567] tmpfs: Bad value for 'mpol' [ 90.864901][ T5581] loop2: detected capacity change from 0 to 1024 [ 90.885229][ T5581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.932834][ T5581] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.977816][ T5590] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.994161][ T5581] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.044912][ T5581] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.097437][ T5581] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.139862][ T2845] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.158364][ T2845] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166975][ T2845] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181070][ T2845] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252541][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.306605][ T5593] loop2: detected capacity change from 0 to 1024 [ 91.323311][ T5593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.340343][ T5593] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.447: lblock 0 mapped to illegal pblock 0 (length 6) [ 91.354187][ T5593] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 91.366600][ T5593] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.366600][ T5593] [ 91.380521][ T5593] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.447: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.394756][ T5593] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.447: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 91.413286][ T5593] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 91.440627][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.459754][ T5597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.448: Parent and EA inode have the same ino 15 [ 91.484928][ T5597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.448: Parent and EA inode have the same ino 15 [ 91.505853][ T5597] EXT4-fs (loop1): 1 orphan inode deleted [ 91.513927][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.605017][ T5601] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 91.663310][ T5607] EXT4-fs: Ignoring removed orlov option [ 91.682683][ T5607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.717370][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 91.725444][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.813340][ T5615] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 92.017600][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.040370][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.127344][ T5627] futex_wake_op: syz.3.455 tries to shift op by -3; fix this program [ 92.149529][ T5603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.160893][ T5603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.174972][ T5627] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 92.344135][ T3514] Alternate GPT is invalid, using primary GPT. [ 92.350587][ T3514] loop2: p2 p3 p7 [ 92.354903][ T5615] bond0: (slave dummy0): Releasing backup interface [ 92.365506][ T5615] team0: Port device dummy0 added [ 92.375110][ T5640] Alternate GPT is invalid, using primary GPT. [ 92.379257][ T5627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.381785][ T5640] loop2: p2 p3 p7 [ 92.390328][ T2845] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.400486][ T2845] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.409066][ T2845] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.417582][ T2845] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.438809][ T5634] bond1 (unregistering): Released all slaves [ 92.521749][ T5647] set_capacity_and_notify: 3 callbacks suppressed [ 92.521765][ T5647] loop0: detected capacity change from 0 to 1024 [ 92.553297][ T5647] EXT4-fs: inline encryption not supported [ 92.559297][ T5647] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.589269][ T5653] loop3: detected capacity change from 0 to 512 [ 92.608757][ T5653] EXT4-fs: Ignoring removed i_version option [ 92.620987][ T5653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.638784][ T5647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.692143][ T5653] EXT4-fs (loop3): 1 truncate cleaned up [ 92.718965][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.807511][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.831457][ T5672] loop2: detected capacity change from 0 to 512 [ 92.842621][ T5672] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.463: error while reading EA inode 32 err=-116 [ 92.936018][ T5672] EXT4-fs (loop2): Remounting filesystem read-only [ 92.942757][ T5672] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 92.953939][ T5672] EXT4-fs (loop2): 1 orphan inode deleted [ 92.960154][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.973095][ T5672] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.994170][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.045798][ T5672] kernel profiling enabled (shift: 63) [ 93.051325][ T5672] profiling shift: 63 too large [ 93.594037][ T5710] netlink: 'syz.4.468': attribute type 12 has an invalid length. [ 93.601876][ T5710] netlink: 'syz.4.468': attribute type 29 has an invalid length. [ 93.665371][ T5713] IPVS: length: 101 != 813667928 [ 93.688933][ T5717] loop2: detected capacity change from 0 to 1024 [ 93.700706][ T5717] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.716927][ T5717] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 93.725530][ T5717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.733682][ T5717] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.470: Failed to acquire dquot type 0 [ 93.748281][ T5717] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.470: Failed to acquire dquot type 0 [ 93.761194][ T5717] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.470: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.778152][ T5716] netlink: 'syz.1.469': attribute type 30 has an invalid length. [ 93.788815][ T5720] loop3: detected capacity change from 0 to 512 [ 93.827535][ T5717] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.470: Failed to acquire dquot type 0 [ 93.831836][ T5719] netlink: 'syz.1.469': attribute type 13 has an invalid length. [ 93.878190][ T5723] SELinux: security_context_str_to_sid (lþ œ­T‘y\ï;ÝjµO÷ (ÜBÎðZ* [ 93.878190][ T5723] w#31Ù7a…€gÚš'6âµWV,x)Ÿk2ï$ßEÿœåšŠµÒoK+Я´K¦L8x;gŒ@¢ÁÙ<îø ±½Úè7$ÕÀ ûhžóÁ?™—»¦œDÝ—W¯V¥õóœ) failed with errno=-22 [ 93.878274][ T5724] loop4: detected capacity change from 0 to 128 [ 93.921859][ T5717] EXT4-fs (loop2): 1 orphan inode deleted [ 93.938944][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.946241][ T5717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.989585][ T5717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.002095][ T5719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.029894][ T5724] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.195723][ T5729] netlink: 'syz.2.472': attribute type 13 has an invalid length. [ 94.288458][ T5728] infiniband syz!: set down [ 94.293087][ T5728] infiniband syz!: added team_slave_0 [ 94.418249][ T5728] RDS/IB: syz!: added [ 94.442037][ T5728] smc: adding ib device syz! with port count 1 [ 94.448752][ T5728] smc: ib device syz! port 1 has no pnetid [ 94.994570][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.195242][ T5739] loop3: detected capacity change from 0 to 736 [ 95.310446][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 95.310462][ T29] audit: type=1400 audit(95.284:12684): avc: denied { read } for pid=5742 comm="syz.3.479" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.339210][ T29] audit: type=1400 audit(95.284:12685): avc: denied { open } for pid=5742 comm="syz.3.479" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.484196][ T5748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5748 comm=syz.3.481 [ 95.550508][ T29] audit: type=1400 audit(95.344:12686): avc: denied { ioctl } for pid=5742 comm="syz.3.479" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.574775][ T29] audit: type=1326 audit(95.424:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.597603][ T29] audit: type=1326 audit(95.424:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.620334][ T29] audit: type=1326 audit(95.424:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.643112][ T29] audit: type=1326 audit(95.424:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.665874][ T29] audit: type=1326 audit(95.424:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.688589][ T29] audit: type=1326 audit(95.424:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.711441][ T29] audit: type=1326 audit(95.424:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 95.772711][ T5751] loop4: detected capacity change from 0 to 512 [ 95.787754][ T5751] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.068723][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.170186][ T5766] team0 (unregistering): Port device team_slave_0 removed [ 96.184177][ T5766] team0 (unregistering): Port device team_slave_1 removed [ 96.200981][ T5768] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 96.207551][ T5768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.215888][ T5768] vhci_hcd vhci_hcd.0: Device attached [ 96.285599][ T5768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5768 comm=syz.1.495 [ 96.330831][ T5775] loop0: detected capacity change from 0 to 512 [ 96.352279][ T5777] loop4: detected capacity change from 0 to 512 [ 96.363533][ T5775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.372153][ T5768] netlink: 'syz.1.495': attribute type 3 has an invalid length. [ 96.380406][ T5768] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 96.392015][ T5768] __nla_validate_parse: 10 callbacks suppressed [ 96.392032][ T5768] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.495'. [ 96.433224][ T5777] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.459325][ T5777] EXT4-fs (loop4): mount failed [ 96.471691][ T5632] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 96.486953][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 96.534721][ T5777] pim6reg: entered allmulticast mode [ 96.551418][ T5777] pim6reg: left allmulticast mode [ 96.564332][ T5772] vhci_hcd: connection reset by peer [ 96.570145][ T37] vhci_hcd vhci_hcd.1: stop threads [ 96.575432][ T37] vhci_hcd vhci_hcd.1: release socket [ 96.580841][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 96.719389][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 96.752778][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 96.762142][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 96.820869][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 96.830517][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 96.832366][ T5806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.869601][ T5806] EXT4-fs error (device loop4): __ext4_iget:5426: inode #11: block 2: comm syz.4.490: invalid block [ 96.890479][ T5806] EXT4-fs (loop4): Remounting filesystem read-only [ 97.203371][ T5830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.494: Parent and EA inode have the same ino 15 [ 97.215807][ T5830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.494: Parent and EA inode have the same ino 15 [ 97.229175][ T5830] EXT4-fs (loop0): 1 orphan inode deleted [ 97.235494][ T5832] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.303081][ T5833] netlink: 'syz.0.494': attribute type 3 has an invalid length. [ 97.310803][ T5833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.494'. [ 98.563108][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.711147][ T5630] kernel write not supported for file bpf-prog (pid: 5630 comm: kworker/0:15) [ 98.779465][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 98.834505][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.953676][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 99.076629][ T5871] set_capacity_and_notify: 4 callbacks suppressed [ 99.076649][ T5871] loop1: detected capacity change from 0 to 512 [ 99.154550][ T5871] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.504: error while reading EA inode 32 err=-116 [ 99.204306][ T5871] EXT4-fs (loop1): Remounting filesystem read-only [ 99.210896][ T5871] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 99.232591][ T5871] EXT4-fs (loop1): 1 orphan inode deleted [ 99.250947][ T5871] EXT4-fs mount: 8 callbacks suppressed [ 99.250963][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.389411][ T5875] netlink: 'syz.1.504': attribute type 2 has an invalid length. [ 99.397206][ T5875] netlink: 'syz.1.504': attribute type 2 has an invalid length. [ 99.404940][ T5875] netlink: 'syz.1.504': attribute type 2 has an invalid length. [ 99.412619][ T5875] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 99.539760][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.558646][ T5880] netlink: 'syz.3.507': attribute type 30 has an invalid length. [ 99.611905][ T5882] bridge0: entered promiscuous mode [ 99.621834][ T5883] netlink: 'syz.3.507': attribute type 13 has an invalid length. [ 99.642159][ T5882] bridge0: port 3(macsec1) entered blocking state [ 99.648842][ T5882] bridge0: port 3(macsec1) entered disabled state [ 99.670141][ T5882] macsec1: entered allmulticast mode [ 99.675572][ T5882] bridge0: entered allmulticast mode [ 99.692143][ T5882] macsec1: left allmulticast mode [ 99.697248][ T5882] bridge0: left allmulticast mode [ 99.772539][ T5887] loop1: detected capacity change from 0 to 1024 [ 99.780402][ T5882] bridge0: left promiscuous mode [ 99.827142][ T5887] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.892649][ T5883] bridge0: entered promiscuous mode [ 99.907719][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.985641][ T5883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.260741][ T5892] loop9: detected capacity change from 0 to 7 [ 100.268623][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.276833][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.284705][ T3514] loop9: unable to read partition table [ 100.290999][ T5892] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.299071][ T5892] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.307040][ T5892] loop9: unable to read partition table [ 100.313169][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 100.313181][ T29] audit: type=1326 audit(100.294:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 100.359475][ T5892] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 100.359475][ T5892] ) failed (rc=-5) [ 100.374298][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.382474][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.390490][ T29] audit: type=1326 audit(100.324:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67c513f783 code=0x7ffc0000 [ 100.413200][ T29] audit: type=1326 audit(100.324:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f67c513f807 code=0x7ffc0000 [ 100.435979][ T29] audit: type=1326 audit(100.324:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f67c50f6bdd code=0x7ffc0000 [ 100.458717][ T29] audit: type=1326 audit(100.324:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f67c5173e89 code=0x7ffc0000 [ 100.481536][ T29] audit: type=1326 audit(100.324:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f67c50f6c47 code=0x7ffc0000 [ 100.504303][ T29] audit: type=1326 audit(100.324:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f67c50f6357 code=0x7ffc0000 [ 100.527191][ T29] audit: type=1326 audit(100.324:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 100.550033][ T29] audit: type=1326 audit(100.324:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f67c50f63b6 code=0x7ffc0000 [ 100.572820][ T29] audit: type=1326 audit(100.324:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67c513f34b code=0x7ffc0000 [ 100.654435][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.662528][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.670465][ T3514] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.775866][ T5905] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 101.044385][ T5927] kernel profiling enabled (shift: 63) [ 101.049917][ T5927] profiling shift: 63 too large [ 101.426039][ T5943] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 101.437566][ T5943] __nla_validate_parse: 1 callbacks suppressed [ 101.437583][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 101.452837][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 101.464952][ T5943] bridge0: port 1(gretap0) entered blocking state [ 101.471466][ T5943] bridge0: port 1(gretap0) entered disabled state [ 101.479102][ T5943] gretap0: entered allmulticast mode [ 101.485821][ T5943] gretap0: entered promiscuous mode [ 101.504287][ T5944] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 101.512047][ T5944] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 101.631630][ T5632] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 101.969955][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.979256][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.757077][ T5966] loop0: detected capacity change from 0 to 512 [ 102.772570][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 102.782018][ T5966] hsr_slave_0: left promiscuous mode [ 102.787920][ T5966] hsr_slave_1: left promiscuous mode [ 102.798743][ T5964] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.528'. [ 102.922374][ T5984] netlink: 148 bytes leftover after parsing attributes in process `syz.0.531'. [ 102.926092][ T5986] SELinux: security_context_str_to_sid (åO¿‹¤f=ô&í…Ó^}iÂÜ5@Ë¥ì;.\+¹Ú%TNªí·I´æ$†­¡sߌ÷¯¸u¡ÏDEDÞÜd®üŠs¦ÑTpj¼uÀèl‰q'ñ‡ÕæÜœÓRúÀ‡?§£ûìÍýŒaÿc=Út_1—N§öüàâm_0ttÎvˆÿ¢_xN¦ÔRtzÎ.ÃÀ˵ý»ƒšPÀjôêFfÒQ¹ÓÏèikd–íMô_öÔ”Ø=ìe•æ7ÐeíóÚ‘$U&_;°±sbrßÊö~°1 eO*ÑÛ$ûÛjîÀÚÏdÃÉ [ 102.926092][ T5986] •2iÐñ(à ê(æô„CäsVµoi) failed with errno=-22 [ 102.966398][ T5982] xt_hashlimit: max too large, truncated to 1048576 [ 103.098566][ T5991] loop0: detected capacity change from 0 to 128 [ 103.132089][ T5991] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.781679][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.951188][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 104.003277][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 104.118460][ T6040] IPVS: length: 101 != 813667928 [ 104.181179][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 104.190124][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 104.319328][ T6044] wireguard0: entered promiscuous mode [ 104.325081][ T6044] wireguard0: entered allmulticast mode [ 104.351772][ T6040] loop0: detected capacity change from 0 to 512 [ 104.555590][ T6054] validate_nla: 5 callbacks suppressed [ 104.555606][ T6054] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 104.568982][ T6054] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.543'. [ 104.928876][ T6021] syz.3.538 (6021) used greatest stack depth: 7072 bytes left [ 104.945982][ T6062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6062 comm=syz.1.560 [ 104.958428][ T6062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6062 comm=syz.1.560 [ 105.022537][ T6062] loop1: detected capacity change from 0 to 1024 [ 105.030845][ T6062] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 105.055283][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.070202][ T6062] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.560: missing EA_INODE flag [ 105.081928][ T6062] EXT4-fs (loop1): Remounting filesystem read-only [ 105.110060][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.212285][ T6078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6078 comm=syz.4.552 [ 105.233061][ T6078] netlink: 'syz.4.552': attribute type 3 has an invalid length. [ 105.241264][ T6078] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 105.310164][ T6096] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 105.318057][ T6096] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 105.326356][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 105.326443][ T29] audit: type=1326 audit(105.284:14054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.356521][ T29] audit: type=1326 audit(105.334:14055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.379967][ T29] audit: type=1326 audit(105.354:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.403468][ T29] audit: type=1326 audit(105.384:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.432567][ T29] audit: type=1326 audit(105.414:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.478287][ T29] audit: type=1326 audit(105.434:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.501223][ T29] audit: type=1326 audit(105.444:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.524073][ T29] audit: type=1326 audit(105.444:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.546977][ T29] audit: type=1326 audit(105.444:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.569817][ T29] audit: type=1326 audit(105.444:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f604a2005 code=0x7ffc0000 [ 105.597364][ T6095] wireguard0: entered promiscuous mode [ 105.602906][ T6095] wireguard0: entered allmulticast mode [ 105.833506][ T6103] loop0: detected capacity change from 0 to 512 [ 105.862767][ T6103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.871256][ T6103] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.919396][ T6103] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.570: Allocating blocks 41-42 which overlap fs metadata [ 105.958385][ T6103] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.570: Failed to acquire dquot type 1 [ 105.975449][ T6103] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 105.999270][ T6103] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.570: corrupted inode contents [ 106.011770][ T6103] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.570: mark_inode_dirty error [ 106.023420][ T6103] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.570: corrupted inode contents [ 106.040245][ T6103] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.570: mark_inode_dirty error [ 106.051930][ T6103] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.570: corrupted inode contents [ 106.071160][ T6103] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 106.082623][ T6103] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.570: corrupted inode contents [ 106.094697][ T6103] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.570: mark_inode_dirty error [ 106.105989][ T6103] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 106.115421][ T6103] EXT4-fs (loop0): 1 truncate cleaned up [ 106.121820][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.309682][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.349509][ T6121] loop0: detected capacity change from 0 to 512 [ 106.364418][ T6121] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.562: error while reading EA inode 32 err=-116 [ 106.377546][ T6121] EXT4-fs (loop0): Remounting filesystem read-only [ 106.398497][ T6121] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 106.412036][ T6121] EXT4-fs (loop0): 1 orphan inode deleted [ 106.418341][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.501360][ T6128] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 106.509202][ T6128] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 106.516906][ T6128] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 106.524675][ T6128] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 106.679987][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.787761][ T6144] loop0: detected capacity change from 0 to 2048 [ 106.824803][ T3514] Alternate GPT is invalid, using primary GPT. [ 106.831217][ T3514] loop0: p2 p3 p7 [ 106.842382][ T6144] Alternate GPT is invalid, using primary GPT. [ 106.848741][ T6144] loop0: p2 p3 p7 [ 106.917869][ T6145] x_tables: duplicate underflow at hook 1 [ 107.352220][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.916238][ T6164] syz_tun: entered allmulticast mode [ 107.965989][ T6164] __nla_validate_parse: 5 callbacks suppressed [ 107.966017][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 108.321451][ T6164] syz_tun (unregistering): left allmulticast mode [ 108.343333][ T6159] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 108.352843][ T6159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 109.391734][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.426252][ T6229] x_tables: duplicate underflow at hook 1 [ 109.670525][ T6222] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 109.687320][ T6237] loop0: detected capacity change from 0 to 512 [ 109.741615][ T6237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.923540][ T6248] netlink: 'syz.4.587': attribute type 3 has an invalid length. [ 109.931370][ T6248] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 109.939114][ T6248] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.587'. [ 110.004260][ T6250] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 110.012098][ T6250] netlink: 17 bytes leftover after parsing attributes in process `syz.3.586'. [ 110.422433][ T29] kauditd_printk_skb: 797 callbacks suppressed [ 110.422448][ T29] audit: type=1326 audit(110.404:14858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.482338][ T6257] x_tables: duplicate underflow at hook 1 [ 110.812975][ T6256] loop1: detected capacity change from 0 to 2048 [ 110.829652][ T29] audit: type=1326 audit(110.434:14859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.852580][ T29] audit: type=1326 audit(110.434:14860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.875370][ T29] audit: type=1326 audit(110.434:14861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.898202][ T29] audit: type=1326 audit(110.434:14862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.921025][ T29] audit: type=1326 audit(110.434:14863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.943844][ T29] audit: type=1326 audit(110.434:14864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.966656][ T29] audit: type=1326 audit(110.434:14865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 110.989480][ T29] audit: type=1326 audit(110.434:14866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 111.012316][ T29] audit: type=1326 audit(110.434:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 111.341470][ T3514] loop1: p2 p3 p7 [ 111.444032][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 111.456035][ T3514] udevd[3514]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 111.477296][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 111.893394][ T6268] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 111.909462][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.943630][ T6272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6272 comm=syz.3.593 [ 111.956176][ T6272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6272 comm=syz.3.593 [ 111.986611][ T6268] bond1: (slave dummy0): making interface the new active one [ 112.009068][ T6268] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 112.041280][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 112.078715][ T6276] loop1: detected capacity change from 0 to 512 [ 112.086331][ T6276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.120213][ T6276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 112.135945][ T6276] System zones: 1-12 [ 112.140630][ T6276] EXT4-fs (loop1): 1 truncate cleaned up [ 112.160787][ T6276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.182050][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.341409][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.443336][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 112.458636][ T6297] bond0: (slave bond_slave_1): Releasing backup interface [ 112.878314][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 112.891968][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 113.136293][ T6314] loop0: detected capacity change from 0 to 128 [ 113.232328][ T6319] pim6reg: entered allmulticast mode [ 113.273282][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 113.397153][ T6314] bio_check_eod: 5757 callbacks suppressed [ 113.397169][ T6314] syz.0.605: attempt to access beyond end of device [ 113.397169][ T6314] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 113.469500][ T6314] syz.0.605: attempt to access beyond end of device [ 113.469500][ T6314] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 113.493401][ T6314] syz.0.605: attempt to access beyond end of device [ 113.493401][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.507482][ T6314] syz.0.605: attempt to access beyond end of device [ 113.507482][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.541327][ T6314] syz.0.605: attempt to access beyond end of device [ 113.541327][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.586188][ T6322] syz.2.607 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.624209][ T6314] syz.0.605: attempt to access beyond end of device [ 113.624209][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.638450][ T6314] syz.0.605: attempt to access beyond end of device [ 113.638450][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.652594][ T6314] syz.0.605: attempt to access beyond end of device [ 113.652594][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.674893][ T6314] syz.0.605: attempt to access beyond end of device [ 113.674893][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.711152][ T6314] syz.0.605: attempt to access beyond end of device [ 113.711152][ T6314] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 113.777789][ T6339] IPVS: Unknown mcast interface: vcan0 [ 113.824039][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.854013][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.909182][ T6343] loop1: detected capacity change from 0 to 128 [ 113.944946][ T6343] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.042022][ T6343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.611'. [ 114.102315][ T6343] netlink: 43 bytes leftover after parsing attributes in process `syz.1.611'. [ 114.111451][ T6343] tipc: Enabled bearer , priority 10 [ 114.139255][ T6343] ªªªªªª: renamed from vlan0 [ 114.150039][ T6343] tipc: Disabling bearer [ 114.382825][ T6380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6380 comm=syz.0.614 [ 114.395426][ T6380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6380 comm=syz.0.614 [ 114.415778][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 114.462769][ T6380] loop0: detected capacity change from 0 to 1024 [ 114.482218][ T6380] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 114.513151][ T6380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.537656][ T6380] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.614: missing EA_INODE flag [ 114.565114][ T6380] EXT4-fs (loop0): Remounting filesystem read-only [ 114.633010][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.709131][ T6386] vlan2: entered promiscuous mode [ 114.714253][ T6386] hsr_slave_1: entered promiscuous mode [ 114.720202][ T6386] vlan2: entered allmulticast mode [ 114.725452][ T6386] hsr_slave_1: entered allmulticast mode [ 114.737134][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.845312][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 115.156763][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 115.457802][ T6397] loop0: detected capacity change from 0 to 128 [ 115.597259][ T6395] siw: device registration error -23 [ 115.871849][ T29] kauditd_printk_skb: 797 callbacks suppressed [ 115.871873][ T29] audit: type=1326 audit(115.844:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 115.900921][ T29] audit: type=1326 audit(115.844:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 115.923783][ T29] audit: type=1326 audit(115.844:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 115.946628][ T29] audit: type=1326 audit(115.844:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 115.969546][ T29] audit: type=1326 audit(115.844:15669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 115.992467][ T29] audit: type=1326 audit(115.844:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 116.015396][ T29] audit: type=1326 audit(115.844:15671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 116.038324][ T29] audit: type=1326 audit(115.844:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 116.061167][ T29] audit: type=1326 audit(115.844:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 116.084005][ T29] audit: type=1326 audit(115.844:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 116.117738][ T6408] loop1: detected capacity change from 0 to 1024 [ 116.124891][ T6408] EXT4-fs: inline encryption not supported [ 116.130727][ T6408] EXT4-fs: Ignoring removed orlov option [ 116.193179][ T6408] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.214135][ T6408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 116.222328][ T6408] System zones: 0-1, 3-12 [ 116.228272][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.342689][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.664667][ T6428] tmpfs: Bad value for 'mpol' [ 116.765250][ T6434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6434 comm=syz.4.627 [ 116.777695][ T6434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6434 comm=syz.4.627 [ 116.794837][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 116.831695][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 116.843081][ T6436] bond0: (slave bond_slave_1): Releasing backup interface [ 116.858609][ T6440] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 116.910619][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 116.919616][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 117.034200][ T6440] bridge0: port 3(gretap0) entered blocking state [ 117.040757][ T6440] bridge0: port 3(gretap0) entered disabled state [ 117.049565][ T6440] gretap0: entered allmulticast mode [ 117.055540][ T6440] gretap0: entered promiscuous mode [ 117.061706][ T6440] bridge0: port 3(gretap0) entered blocking state [ 117.068241][ T6440] bridge0: port 3(gretap0) entered forwarding state [ 117.245450][ T6455] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 117.268738][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.294775][ T6455] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 117.303860][ T6455] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 117.371754][ T37] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.383769][ T37] bond1: (slave macvlan0): link status up again after 0 ms [ 117.391010][ T37] bond1: (slave macvlan0): failed to get link speed/duplex [ 117.407087][ T6464] vlan0: entered promiscuous mode [ 117.412335][ T6464] vlan0: entered allmulticast mode [ 117.417503][ T6464] hsr_slave_1: entered allmulticast mode [ 117.491779][ T6471] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.501680][ T2845] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.524750][ T2845] bond1: (slave macvlan0): failed to get link speed/duplex [ 117.634371][ T6484] siw: device registration error -23 [ 117.644094][ T922] bond1: (slave macvlan0): failed to get link speed/duplex [ 117.751714][ T2845] bond1: (slave macvlan0): failed to get link speed/duplex [ 117.892259][ T52] bond1: (slave macvlan0): failed to get link speed/duplex [ 117.905800][ T6504] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 118.002365][ T52] bond1: (slave macvlan0): failed to get link speed/duplex [ 118.020636][ T6504] bridge0: port 3(gretap0) entered blocking state [ 118.027150][ T6504] bridge0: port 3(gretap0) entered disabled state [ 118.419300][ T6504] gretap0: entered allmulticast mode [ 118.466521][ T6504] gretap0: entered promiscuous mode [ 118.502144][ T6504] bridge0: port 3(gretap0) entered blocking state [ 118.508713][ T6504] bridge0: port 3(gretap0) entered forwarding state [ 118.561772][ T2845] bond1: (slave macvlan0): failed to get link speed/duplex [ 118.769871][ T6516] loop1: detected capacity change from 0 to 128 [ 119.017583][ T6519] $Hÿ: renamed from bond0 [ 119.279468][ T6519] $Hÿ: entered promiscuous mode [ 119.284600][ T6519] bond_slave_0: entered promiscuous mode [ 119.727273][ T6524] bio_check_eod: 1513 callbacks suppressed [ 119.727294][ T6524] syz.1.650: attempt to access beyond end of device [ 119.727294][ T6524] loop1: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 119.968730][ T6529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6529 comm=syz.2.652 [ 119.981166][ T6529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6529 comm=syz.2.652 [ 120.053301][ T6530] __nla_validate_parse: 9 callbacks suppressed [ 120.053317][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 120.072890][ T2845] kworker/u8:14: attempt to access beyond end of device [ 120.072890][ T2845] loop1: rw=1, sector=241, nr_sectors = 456 limit=128 [ 120.137728][ T2845] kworker/u8:14: attempt to access beyond end of device [ 120.137728][ T2845] loop1: rw=1, sector=857, nr_sectors = 8 limit=128 [ 120.196983][ T6533] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 120.221873][ T2845] kworker/u8:14: attempt to access beyond end of device [ 120.221873][ T2845] loop1: rw=8388609, sector=705, nr_sectors = 1 limit=128 [ 120.235915][ T2845] Buffer I/O error on dev loop1, logical block 705, lost async page write [ 120.365933][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.445424][ T6538] bond2: (slave dummy0): making interface the new active one [ 120.498883][ T6538] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 120.529485][ T6541] syz_tun: entered allmulticast mode [ 120.564446][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 120.667306][ T6539] syz_tun (unregistering): left allmulticast mode [ 121.007147][ T6564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6564 comm=syz.4.657 [ 121.022141][ T6560] tmpfs: Bad value for 'mpol' [ 121.093982][ T29] kauditd_printk_skb: 1053 callbacks suppressed [ 121.094000][ T29] audit: type=1326 audit(121.074:16728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.140506][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.4.662'. [ 121.170379][ T29] audit: type=1326 audit(121.074:16729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.193251][ T29] audit: type=1326 audit(121.074:16730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.216183][ T29] audit: type=1326 audit(121.074:16731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.239595][ T29] audit: type=1326 audit(121.074:16732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.262477][ T29] audit: type=1326 audit(121.074:16733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.282795][ T6569] tmpfs: Bad value for 'mpol' [ 121.285725][ T29] audit: type=1326 audit(121.074:16734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.312840][ T29] audit: type=1326 audit(121.074:16735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.312897][ T29] audit: type=1326 audit(121.074:16736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.312926][ T29] audit: type=1326 audit(121.074:16737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 121.485834][ T6581] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 121.513669][ T6553] loop1: detected capacity change from 0 to 512 [ 121.657374][ T6553] EXT4-fs (loop1): 1 orphan inode deleted [ 121.674275][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.701685][ T2845] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 122.205578][ T6597] syz_tun: entered allmulticast mode [ 122.218742][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 122.230214][ T6597] syz_tun (unregistering): left allmulticast mode [ 122.328273][ T6593] tipc: Started in network mode [ 122.333324][ T6593] tipc: Node identity ac14140f, cluster identity 4711 [ 122.342012][ T6593] tipc: New replicast peer: 255.255.255.255 [ 122.348150][ T6593] tipc: Enabled bearer , priority 10 [ 122.362507][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 122.371400][ T6593] tipc: Disabling bearer [ 122.461971][ T1623] net_ratelimit: 22 callbacks suppressed [ 122.461989][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 122.497489][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.534363][ T6618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6618 comm=syz.4.673 [ 122.546883][ T6618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6618 comm=syz.4.673 [ 122.570391][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 122.582046][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 122.624408][ T6631] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 122.701670][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 122.813221][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 122.924349][ T2893] bond1: (slave macvlan0): failed to get link speed/duplex [ 123.041906][ T2893] bond1: (slave macvlan0): failed to get link speed/duplex [ 123.151734][ T2893] bond1: (slave macvlan0): failed to get link speed/duplex [ 123.261707][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 123.371660][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 123.391635][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.391648][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 123.484624][ T6648] xt_TCPMSS: Only works on TCP SYN packets [ 123.505053][ T37] bond1: (slave macvlan0): failed to get link speed/duplex [ 124.380192][ T6676] syz_tun: entered allmulticast mode [ 124.421033][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 124.457361][ T6676] syz_tun (unregistering): left allmulticast mode [ 124.622438][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 124.709467][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 126.549446][ T6739] syz.4.691 (6739) used greatest stack depth: 6312 bytes left [ 126.603229][ T6749] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 126.622244][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 126.622320][ T29] audit: type=1326 audit(126.604:16878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.654518][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 126.663763][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.692'. [ 126.692413][ T6749] bridge0: port 3(gretap0) entered blocking state [ 126.698918][ T6749] bridge0: port 3(gretap0) entered disabled state [ 126.705653][ T6749] gretap0: entered allmulticast mode [ 126.711475][ T29] audit: type=1326 audit(126.634:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.734318][ T29] audit: type=1326 audit(126.634:16880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.757192][ T29] audit: type=1326 audit(126.634:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.780202][ T29] audit: type=1326 audit(126.634:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.803184][ T29] audit: type=1326 audit(126.634:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 126.826114][ T29] audit: type=1326 audit(126.634:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.848934][ T29] audit: type=1326 audit(126.634:16885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 126.856976][ T6749] gretap0: entered promiscuous mode [ 126.872029][ T29] audit: type=1326 audit(126.634:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 126.899919][ T29] audit: type=1326 audit(126.634:16888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 127.547176][ T2845] net_ratelimit: 26 callbacks suppressed [ 127.547196][ T2845] bond1: (slave macvlan0): failed to get link speed/duplex [ 127.688984][ T2350] bond1: (slave macvlan0): failed to get link speed/duplex [ 127.811784][ T2350] bond1: (slave macvlan0): failed to get link speed/duplex [ 127.921832][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 127.930749][ T6766] openvswitch: netlink: Missing key (keys=40, expected=100) [ 128.031971][ T1623] bond1: (slave macvlan0): failed to get link speed/duplex [ 128.081859][ T6805] netlink: 14 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.108731][ T6805] netlink: 43 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.124717][ T6805] tipc: Started in network mode [ 128.129652][ T6805] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 128.136908][ T6805] tipc: Enabled bearer , priority 10 [ 128.143396][ T2350] bond1: (slave macvlan0): failed to get link speed/duplex [ 128.362734][ T6805] ªªªªªª: renamed from vlan0 [ 128.370586][ T6805] tipc: Disabling bearer [ 128.413505][ T2350] bond1: (slave macvlan0): failed to get link speed/duplex [ 128.521715][ T2845] bond1: (slave macvlan0): failed to get link speed/duplex [ 128.549703][ T6809] loop0: detected capacity change from 0 to 1024 [ 128.577668][ T6811] netlink: 'syz.3.706': attribute type 13 has an invalid length. [ 128.600988][ T6809] EXT4-fs: Ignoring removed orlov option [ 128.642715][ T6811] bridge0: port 3(gretap0) entered disabled state [ 128.666222][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.716262][ T6811] batman_adv: batadv0: Interface deactivated: macsec1 [ 128.931128][ T6809] Trying to write to read-only block-device loop0 [ 128.954206][ T6820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6820 comm=syz.2.710 [ 128.988369][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 129.068988][ T6831] sctp: [Deprecated]: syz.1.713 (pid 6831) Use of int in maxseg socket option. [ 129.068988][ T6831] Use struct sctp_assoc_value instead [ 129.094959][ T6828] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 129.126376][ T6831] loop1: detected capacity change from 0 to 1764 [ 129.142184][ T6831] iso9660: Unknown parameter 'no' [ 129.185114][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.827239][ T6850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 129.834096][ T6850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.841860][ T6850] vhci_hcd vhci_hcd.0: Device attached [ 129.949379][ T6860] tipc: Enabling of bearer rejected, failed to enable media [ 130.060060][ T6867] veth2: entered promiscuous mode [ 130.065285][ T6867] veth2: entered allmulticast mode [ 130.074935][ T5621] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 130.131766][ T6839] openvswitch: netlink: Missing key (keys=40, expected=100) [ 130.141616][ T5621] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 131.041655][ T6851] vhci_hcd: connection reset by peer [ 131.063757][ T2350] vhci_hcd vhci_hcd.0: stop threads [ 131.064021][ T23] page_pool_release_retry() stalled pool shutdown: id 30, 49 inflight 61 sec [ 131.069106][ T2350] vhci_hcd vhci_hcd.0: release socket [ 131.083451][ T2350] vhci_hcd vhci_hcd.0: disconnect device [ 131.182013][ T6887] netlink: 'syz.4.721': attribute type 13 has an invalid length. [ 131.215986][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.242855][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.256587][ T6888] netlink: 14 bytes leftover after parsing attributes in process `syz.3.722'. [ 131.267235][ T6888] netlink: 43 bytes leftover after parsing attributes in process `syz.3.722'. [ 131.276808][ T6888] tipc: Enabling of bearer rejected, failed to enable media [ 131.658662][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 131.658680][ T29] audit: type=1326 audit(131.634:17169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f604665e7 code=0x7ffc0000 [ 131.852111][ T29] audit: type=1326 audit(131.694:17170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f6040b829 code=0x7ffc0000 [ 131.875002][ T29] audit: type=1326 audit(131.694:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f604665e7 code=0x7ffc0000 [ 131.897767][ T29] audit: type=1326 audit(131.694:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f6040b829 code=0x7ffc0000 [ 131.920622][ T29] audit: type=1326 audit(131.694:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f3f6046f749 code=0x7ffc0000 [ 131.943436][ T29] audit: type=1326 audit(131.694:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 131.966171][ T29] audit: type=1326 audit(131.694:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 131.988912][ T29] audit: type=1326 audit(131.694:17176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 132.011868][ T29] audit: type=1326 audit(131.704:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 132.034679][ T29] audit: type=1326 audit(131.704:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 132.196691][ T6923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6923 comm=syz.2.730 [ 132.209227][ T6923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6923 comm=syz.2.730 [ 132.264530][ T6929] netlink: 'syz.3.733': attribute type 11 has an invalid length. [ 132.272424][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.733'. [ 132.283683][ T6929] xt_hashlimit: max too large, truncated to 1048576 [ 132.304471][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 132.396735][ T6931] SELinux: Context @ is not valid (left unmapped). [ 132.414550][ T6935] netlink: 'syz.0.735': attribute type 13 has an invalid length. [ 132.448618][ T6935] bridge0: port 3(gretap0) entered disabled state [ 132.544364][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.551732][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.656612][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.687453][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.868305][ T6945] loop1: detected capacity change from 0 to 2048 [ 132.881539][ T31] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.074303][ T6945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.167167][ T6945] netlink: 'syz.1.737': attribute type 3 has an invalid length. [ 133.693792][ T31] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.702997][ T31] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.711462][ T31] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.798139][ T6960] loop0: detected capacity change from 0 to 1024 [ 133.810201][ T6960] EXT4-fs: Ignoring removed orlov option [ 133.839105][ T6960] loop0: detected capacity change from 0 to 128 [ 133.848264][ T6950] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.888995][ T6950] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 133.901517][ T6950] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.901517][ T6950] [ 133.911248][ T6950] EXT4-fs (loop1): Total free blocks count 0 [ 133.917258][ T6950] EXT4-fs (loop1): Free/Dirty block details [ 133.923193][ T6950] EXT4-fs (loop1): free_blocks=2415919104 [ 133.928925][ T6950] EXT4-fs (loop1): dirty_blocks=3088 [ 133.934327][ T6950] EXT4-fs (loop1): Block reservation details [ 133.940326][ T6950] EXT4-fs (loop1): i_reserved_data_blocks=193 [ 134.027418][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 134.030014][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1028 with error 28 [ 134.128320][ T6960] tap0: tun_chr_ioctl cmd 1074025681 [ 134.142330][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 134.151033][ T6971] loop1: detected capacity change from 0 to 1024 [ 134.271666][ T4316] IPVS: ip_vs_send_async error -101 [ 134.463909][ T6998] loop0: detected capacity change from 0 to 512 [ 134.664712][ T7000] wireguard0: entered promiscuous mode [ 134.670266][ T7000] wireguard0: entered allmulticast mode [ 135.085652][ T7010] netlink: 'syz.2.752': attribute type 13 has an invalid length. [ 135.152384][ T5621] usb 1-1: enqueue for inactive port 0 [ 135.175817][ T5621] usb 1-1: enqueue for inactive port 0 [ 135.208108][ T7013] xt_hashlimit: max too large, truncated to 1048576 [ 135.216831][ T6995] loop1: detected capacity change from 0 to 2048 [ 135.285685][ T5621] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 135.330766][ T7015] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 135.783916][ T7030] x_tables: duplicate underflow at hook 1 [ 135.805969][ T7030] vhci_hcd vhci_hcd.2: default hub control req: 0317 v0000 i0000 l173 [ 135.937492][ T7047] syzkaller0: entered allmulticast mode [ 135.944999][ T7047] syzkaller0 (unregistering): left allmulticast mode [ 136.019712][ T7051] program syz.1.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.038619][ T7054] ªªªªªª: renamed from wg2 [ 137.164160][ T7051] loop1: detected capacity change from 0 to 1024 [ 137.195739][ T7051] EXT4-fs: inline encryption not supported [ 137.240169][ T7069] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.266092][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.425717][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 137.448216][ T7050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 137.472548][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.601738][ T7080] loop1: detected capacity change from 0 to 164 [ 137.616266][ T7080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.626198][ T7080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.634673][ T7080] Symlink component flag not implemented [ 137.640363][ T7080] Symlink component flag not implemented [ 137.646506][ T7080] Symlink component flag not implemented (7) [ 137.652635][ T7080] Symlink component flag not implemented (116) [ 137.661789][ T7080] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.670742][ T7080] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.681525][ T7080] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.716589][ T7080] netlink: 8 bytes leftover after parsing attributes in process `'. [ 137.729590][ T7080] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 138.013069][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 138.013087][ T29] audit: type=1326 audit(137.994:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.479334][ T7097] SELinux: failed to load policy [ 138.541735][ T29] audit: type=1400 audit(138.264:18090): avc: denied { recv } for pid=7088 comm="syz.4.773" saddr=10.128.0.163 src=30036 daddr=10.128.0.247 dest=35058 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 138.566684][ T29] audit: type=1326 audit(138.364:18091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.589417][ T29] audit: type=1326 audit(138.364:18092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.612349][ T29] audit: type=1326 audit(138.364:18093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.635208][ T29] audit: type=1326 audit(138.364:18094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.658114][ T29] audit: type=1326 audit(138.364:18095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.680955][ T29] audit: type=1326 audit(138.364:18096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.703778][ T29] audit: type=1326 audit(138.364:18097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.726593][ T29] audit: type=1326 audit(138.364:18098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e77ef749 code=0x7ffc0000 [ 138.752962][ T7099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7099 comm=syz.1.774 [ 139.152679][ T7123] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 139.229615][ T7126] net_ratelimit: 1 callbacks suppressed [ 139.229629][ T7126] openvswitch: netlink: Missing key (keys=40, expected=80) [ 139.519644][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7130 comm=syz.1.782 [ 139.584946][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 139.609658][ T7137] Invalid argument reading file caps for ./file0 [ 139.739042][ T7143] loop1: detected capacity change from 0 to 512 [ 139.764880][ T7143] ext4: Unknown parameter 'fsuuid' [ 140.017897][ T7151] netlink: 3 bytes leftover after parsing attributes in process `syz.4.788'. [ 140.041185][ T7151] 0ªX¹¦À: renamed from caif0 [ 140.046067][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 140.059050][ T7151] 0ªX¹¦À: entered allmulticast mode [ 140.064331][ T7151] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 140.150873][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.161966][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.301422][ T7141] loop0: detected capacity change from 0 to 2048 [ 140.759486][ T7174] sctp: [Deprecated]: syz.2.793 (pid 7174) Use of int in maxseg socket option. [ 140.759486][ T7174] Use struct sctp_assoc_value instead [ 140.852486][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 141.644001][ T7198] loop0: detected capacity change from 0 to 1024 [ 141.674847][ T7198] EXT4-fs: inline encryption not supported [ 141.879363][ T7211] pim6reg: left allmulticast mode [ 142.223305][ T2350] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.437013][ T7222] blktrace: Concurrent blktraces are not allowed on loop1 [ 142.698131][ T7248] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 142.742146][ T7251] __nla_validate_parse: 3 callbacks suppressed [ 142.742161][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 142.982274][ T7259] loop1: detected capacity change from 0 to 8192 [ 143.004251][ T7259] wireguard0: entered promiscuous mode [ 143.009787][ T7259] wireguard0: entered allmulticast mode [ 143.021938][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 143.021954][ T29] audit: type=1326 audit(143.004:18729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 143.051984][ T29] audit: type=1326 audit(143.004:18730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 143.074813][ T29] audit: type=1326 audit(143.004:18731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 143.097473][ T29] audit: type=1326 audit(143.014:18732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 143.120217][ T29] audit: type=1326 audit(143.014:18733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 143.142965][ T29] audit: type=1326 audit(143.014:18734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f735322f749 code=0x7ffc0000 [ 143.179065][ T29] audit: type=1326 audit(143.024:18735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 143.202089][ T29] audit: type=1326 audit(143.034:18736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 143.224826][ T29] audit: type=1326 audit(143.034:18737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73532265e7 code=0x7ffc0000 [ 143.247549][ T29] audit: type=1326 audit(143.034:18738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73531cb829 code=0x7ffc0000 [ 143.481069][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 143.490763][ T7276] IPVS: Error connecting to the multicast addr [ 143.807063][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 143.822255][ T7292] netlink: 164 bytes leftover after parsing attributes in process `syz.4.822'. [ 144.271622][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 144.271622][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.320720][ T7296] netlink: 3 bytes leftover after parsing attributes in process `syz.0.823'. [ 144.351792][ T7296] 0ªX¹¦À: renamed from caif0 [ 144.359439][ T7296] 0ªX¹¦À: entered allmulticast mode [ 144.364777][ T7296] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 144.809490][ T7332] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.890176][ T7334] loop0: detected capacity change from 0 to 512 [ 145.025326][ T7345] xt_hashlimit: max too large, truncated to 1048576 [ 145.067143][ T7345] loop0: detected capacity change from 0 to 512 [ 145.098784][ T7345] loop0: detected capacity change from 0 to 1024 [ 145.119730][ T7345] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 145.232045][ T7348] loop0: detected capacity change from 0 to 1024 [ 145.294592][ T7350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.344446][ T7352] loop0: detected capacity change from 0 to 128 [ 146.130132][ T7381] netlink: 8 bytes leftover after parsing attributes in process `tp'. [ 146.138537][ T7381] netlink: 4 bytes leftover after parsing attributes in process `tp'. [ 146.369585][ T7395] hub 9-0:1.0: USB hub found [ 146.374556][ T7395] hub 9-0:1.0: 8 ports detected [ 146.404160][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 146.977050][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 147.001781][ T7410] loop0: detected capacity change from 0 to 8192 [ 147.514062][ T7425] netlink: 'syz.4.857': attribute type 30 has an invalid length. [ 148.162520][ T29] kauditd_printk_skb: 1321 callbacks suppressed [ 148.162568][ T29] audit: type=1326 audit(148.144:20060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.204702][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 148.247341][ T29] audit: type=1326 audit(148.174:20061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.270329][ T29] audit: type=1326 audit(148.174:20062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.293396][ T29] audit: type=1326 audit(148.174:20063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.316359][ T29] audit: type=1326 audit(148.174:20064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.339604][ T29] audit: type=1326 audit(148.174:20065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.362509][ T29] audit: type=1326 audit(148.174:20066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.385598][ T29] audit: type=1326 audit(148.174:20067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.408596][ T29] audit: type=1326 audit(148.174:20068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.429841][ T7448] loop1: detected capacity change from 0 to 1024 [ 148.432054][ T29] audit: type=1326 audit(148.174:20069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67c513f749 code=0x7ffc0000 [ 148.481089][ T7448] EXT4-fs: Ignoring removed orlov option [ 148.590471][ T7448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.688491][ T7445] ================================================================== [ 148.696640][ T7445] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 148.706306][ T7445] [ 148.708651][ T7445] write to 0xffff88811a6fee00 of 8 bytes by task 7444 on cpu 1: [ 148.716299][ T7445] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 148.722227][ T7445] page_pool_alloc_pages+0xd0/0x130 [ 148.727452][ T7445] bpf_test_run_xdp_live+0x54d/0x11d0 [ 148.732857][ T7445] bpf_prog_test_run_xdp+0x525/0x970 [ 148.738178][ T7445] bpf_prog_test_run+0x204/0x340 [ 148.743139][ T7445] __sys_bpf+0x4c0/0x7c0 [ 148.747393][ T7445] __x64_sys_bpf+0x41/0x50 [ 148.751827][ T7445] x64_sys_call+0x28e1/0x3000 [ 148.756526][ T7445] do_syscall_64+0xca/0x2b0 [ 148.761060][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.766967][ T7445] [ 148.769299][ T7445] read to 0xffff88811a6fee00 of 8 bytes by task 7445 on cpu 0: [ 148.776851][ T7445] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 148.782772][ T7445] napi_pp_put_page+0xe9/0x200 [ 148.787559][ T7445] skb_free_head+0x12c/0x150 [ 148.792262][ T7445] skb_release_data+0x33b/0x370 [ 148.797141][ T7445] __kfree_skb+0x44/0x150 [ 148.801482][ T7445] sk_skb_reason_drop+0xbd/0x270 [ 148.806428][ T7445] udp_recvmsg+0x11a/0xb90 [ 148.810862][ T7445] inet_recvmsg+0x143/0x290 [ 148.815371][ T7445] sock_recvmsg+0xf6/0x170 [ 148.819794][ T7445] ____sys_recvmsg+0xf5/0x280 [ 148.824501][ T7445] ___sys_recvmsg+0x11f/0x370 [ 148.829213][ T7445] do_recvmmsg+0x1ef/0x540 [ 148.833639][ T7445] __x64_sys_recvmmsg+0xe5/0x170 [ 148.838606][ T7445] x64_sys_call+0x2b75/0x3000 [ 148.843330][ T7445] do_syscall_64+0xca/0x2b0 [ 148.847867][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.853782][ T7445] [ 148.856117][ T7445] value changed: 0xffffea00051950c0 -> 0x0000000000000000 [ 148.863232][ T7445] [ 148.865595][ T7445] Reported by Kernel Concurrency Sanitizer on: [ 148.871782][ T7445] CPU: 0 UID: 0 PID: 7445 Comm: syz.4.860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.881431][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.891487][ T7445] ================================================================== [ 149.001849][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.047912][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 149.048755][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.093293][ T7442] team0 (unregistering): Port device team_slave_0 removed [ 149.122668][ T7442] team0 (unregistering): Port device team_slave_1 removed [ 149.364875][ T7442] netlink: 164 bytes leftover after parsing attributes in process `syz.2.859'. [ 149.402034][ T7463] tap0: tun_chr_ioctl cmd 1074025681 [ 149.652049][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.