last executing test programs: 4m39.223570801s ago: executing program 32 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4m36.630901391s ago: executing program 33 (id=205): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20205, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m11.169327083s ago: executing program 1 (id=900): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x10, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) 4m11.071415984s ago: executing program 1 (id=901): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 4m10.993367776s ago: executing program 1 (id=904): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x2000000}, 0x10) 4m10.940260406s ago: executing program 1 (id=906): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x0, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x21a509d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 4m10.843104448s ago: executing program 1 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m10.792455919s ago: executing program 5 (id=909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r2, r1, 0x80000) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 4m10.68602961s ago: executing program 5 (id=914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000740)="08a9", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000900)={0x0, @in={{0x2, 0xfffe, @local}}, 0x0, 0x7ffe}, 0x90) 4m10.665895671s ago: executing program 5 (id=915): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) poll(&(0x7f0000000140)=[{r0, 0x8008}, {0xffffffffffffffff, 0x400}], 0x2, 0x4) 4m10.604492091s ago: executing program 1 (id=916): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4m10.604272631s ago: executing program 34 (id=916): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4m10.603746722s ago: executing program 5 (id=919): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x0, 0x573, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x21a509d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 4m10.496331053s ago: executing program 5 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 4m8.577669553s ago: executing program 5 (id=961): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001880)={'sit0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 4m8.544879913s ago: executing program 35 (id=961): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001880)={'sit0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 3m6.772900173s ago: executing program 0 (id=2620): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) 3m6.726125894s ago: executing program 0 (id=2623): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m6.637950675s ago: executing program 0 (id=2627): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m6.428542308s ago: executing program 0 (id=2629): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m6.427991878s ago: executing program 0 (id=2630): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) set_tid_address(0x0) 3m6.394840829s ago: executing program 0 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, r1, 0x209}, 0x14}}, 0x0) 3m6.35327333s ago: executing program 36 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, r1, 0x209}, 0x14}}, 0x0) 1m20.363514477s ago: executing program 9 (id=5704): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m20.232024199s ago: executing program 9 (id=5710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1m20.18269497s ago: executing program 9 (id=5712): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_page_alloc\x00', r3, 0x0, 0xf29}, 0x18) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) 1m20.149315711s ago: executing program 9 (id=5713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m20.148324181s ago: executing program 9 (id=5714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="43debca6338a8b1838a1a65fd73830c3ee879d2f9432", 0x16}], 0x1}}], 0x1, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.045822662s ago: executing program 9 (id=5716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m20.045505272s ago: executing program 37 (id=5716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m4.770282137s ago: executing program 8 (id=6149): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000940)={0x0, &(0x7f0000000840)}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1m2.59614461s ago: executing program 38 (id=6191): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 3.709917093s ago: executing program 4 (id=7394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 2.804983617s ago: executing program 4 (id=7392): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu&&0&&\t') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') 2.722645968s ago: executing program 4 (id=7396): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1.585591235s ago: executing program 2 (id=7428): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001740)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x84, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 1.502776617s ago: executing program 2 (id=7432): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.442391088s ago: executing program 2 (id=7435): unshare(0x26000400) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x2710}) timer_getoverrun(r1) 1.355995259s ago: executing program 2 (id=7439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$netlink(0x10, 0x3, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 749.034318ms ago: executing program 7 (id=7462): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 692.643589ms ago: executing program 7 (id=7463): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xf095, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 692.248539ms ago: executing program 7 (id=7464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 660.09773ms ago: executing program 7 (id=7466): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) 613.02223ms ago: executing program 7 (id=7468): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 563.418681ms ago: executing program 7 (id=7469): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x5}, 0x4c58, 0x10000, 0x3, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 551.365751ms ago: executing program 3 (id=7472): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 531.932221ms ago: executing program 3 (id=7473): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r4, 0x0, 0x1fffffffffff, 0x0) 482.564472ms ago: executing program 2 (id=7474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 481.700472ms ago: executing program 6 (id=7476): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 481.426342ms ago: executing program 2 (id=7478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 450.663203ms ago: executing program 3 (id=7479): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 397.424163ms ago: executing program 6 (id=7480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001142901002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 366.619434ms ago: executing program 3 (id=7481): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xc2, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffc, 0x0, 0x4, 0x6, 0x0, @multicast1, @private=0xa010102}, {0x0, 0x4, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "44ad2d7b99c6faa8c453c2416237b50539d7db8c5171d2a1a2de1c95494671d9", "48dd5dde41d9f1fe83cd7c7f11667eb052c34a293f322a0fb83886c1ecc66eb0005fb69cf659805600", "aa427f6725087d614110cce8251c76e6fcea0276aed216ba86c09374", {"d580995ebd1ccf5ac1a2410cdb63ab45", "b6f9bf187a554122009eb5ee31c58557"}}}}}}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 366.087694ms ago: executing program 6 (id=7482): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "e900"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) 151.653798ms ago: executing program 4 (id=7483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 151.416658ms ago: executing program 6 (id=7484): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001740)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x84, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 151.060327ms ago: executing program 3 (id=7485): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 73.893568ms ago: executing program 4 (id=7486): socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r0, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 65.918769ms ago: executing program 3 (id=7487): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',fscache,cache=none,dfltuid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0]) 58.443429ms ago: executing program 6 (id=7488): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) time(0x0) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 508.38µs ago: executing program 4 (id=7489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0xfdff]}}], 0xffc8) 0s ago: executing program 6 (id=7490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) kernel console output (not intermixed with test programs): gth. [ 247.882746][T19169] netlink: 'syz.7.5784': attribute type 1 has an invalid length. [ 247.931059][T19169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.957638][T19178] bond3 (unregistering): Released all slaves [ 248.254844][T19191] loop8: detected capacity change from 0 to 128 [ 248.313869][T19193] loop8: detected capacity change from 0 to 512 [ 248.334829][T19193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.341490][T19193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.425117][T19193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.437683][T19193] ext4 filesystem being mounted at /1059/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.510686][ T6208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.611750][T19204] loop4: detected capacity change from 0 to 512 [ 248.649277][T19204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.661892][T19204] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.704810][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.725475][T19208] loop4: detected capacity change from 0 to 256 [ 248.732289][T19208] FAT-fs (loop4): bogus number of FAT sectors [ 248.738437][T19208] FAT-fs (loop4): Can't find a valid FAT filesystem [ 248.829693][T19211] loop8: detected capacity change from 0 to 512 [ 248.851768][T19211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.872771][T19211] ext4 filesystem being mounted at /1062/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.013261][T19221] batadv_slave_0: entered promiscuous mode [ 249.025896][T19223] __nla_validate_parse: 8 callbacks suppressed [ 249.025909][T19223] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5802'. [ 249.053184][ T6208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.126370][T19234] xt_CT: No such helper "netbios-ns" [ 249.206790][T19245] 9pnet_fd: p9_fd_create_tcp (19245): problem connecting socket to 127.0.0.1 [ 249.253928][T19247] netlink: 'syz.3.5810': attribute type 13 has an invalid length. [ 249.611535][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 249.611549][ T29] audit: type=1400 audit(1750407870.108:6329): avc: denied { lock } for pid=19265 comm="syz.7.5819" path="socket:[47723]" dev="sockfs" ino=47723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 249.947568][T19274] netlink: 'syz.6.5823': attribute type 3 has an invalid length. [ 249.955457][T19274] netlink: 'syz.6.5823': attribute type 3 has an invalid length. [ 249.968115][T19274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5823'. [ 250.328715][ T29] audit: type=1326 audit(1750407870.828:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.352340][ T29] audit: type=1326 audit(1750407870.828:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.376374][ T29] audit: type=1326 audit(1750407870.888:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.399955][ T29] audit: type=1326 audit(1750407870.888:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.423607][ T29] audit: type=1326 audit(1750407870.888:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.482358][ T29] audit: type=1326 audit(1750407870.928:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.505941][ T29] audit: type=1326 audit(1750407870.928:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.529682][ T29] audit: type=1326 audit(1750407870.928:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.553282][ T29] audit: type=1326 audit(1750407870.928:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.4.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 250.579209][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5830'. [ 250.677270][T19306] netlink: 'syz.4.5835': attribute type 3 has an invalid length. [ 250.728622][T19312] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5840'. [ 251.394056][T19346] lo speed is unknown, defaulting to 1000 [ 251.451020][T19347] SELinux: failed to load policy [ 251.456926][T19355] 9pnet_fd: p9_fd_create_tcp (19355): problem connecting socket to 127.0.0.1 [ 251.528624][T19358] loop8: detected capacity change from 0 to 512 [ 251.561755][T19358] EXT4-fs (loop8): orphan cleanup on readonly fs [ 251.569649][T19358] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.5860: bad orphan inode 13 [ 251.593117][T19358] ext4_test_bit(bit=12, block=18) = 1 [ 251.598656][T19358] is_bad_inode(inode)=0 [ 251.602857][T19358] NEXT_ORPHAN(inode)=2130706432 [ 251.607851][T19358] max_ino=32 [ 251.611073][T19358] i_nlink=1 [ 251.627928][T19358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.649867][T19368] loop4: detected capacity change from 0 to 164 [ 251.670355][T19358] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 251.697270][T19358] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 251.704547][T19368] bio_check_eod: 11587 callbacks suppressed [ 251.704563][T19368] syz.4.5864: attempt to access beyond end of device [ 251.704563][T19368] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 251.744042][ T6208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.755015][T19368] syz.4.5864: attempt to access beyond end of device [ 251.755015][T19368] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 251.947722][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5876'. [ 252.001739][T19400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19400 comm=syz.3.5878 [ 252.056401][T19404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19404 comm=syz.3.5880 [ 252.107757][T19408] netlink: 'syz.3.5882': attribute type 32 has an invalid length. [ 252.115693][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5882'. [ 252.256419][T19428] netlink: 'syz.3.5887': attribute type 3 has an invalid length. [ 252.264221][T19428] netlink: 'syz.3.5887': attribute type 3 has an invalid length. [ 252.272388][T19428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5887'. [ 252.326402][T19432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5889'. [ 252.339405][T19432] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.347752][T19432] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.356111][T19432] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.364538][T19432] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.376087][T19432] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.384630][T19432] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.393208][T19432] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.401712][T19432] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.518488][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5900'. [ 252.671570][T19384] 9pnet_fd: p9_fd_create_tcp (19384): problem connecting socket to 127.0.0.1 [ 252.924170][T19517] loop4: detected capacity change from 0 to 128 [ 252.935928][T19517] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.958456][T19517] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.024969][T18975] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.718762][T19555] SELinux: failed to load policy [ 253.769322][T19561] netlink: 372 bytes leftover after parsing attributes in process `syz.7.5946'. [ 253.919989][T19575] lo speed is unknown, defaulting to 1000 [ 254.063558][T19589] macsec0: entered allmulticast mode [ 254.069393][T19589] bridge0: entered allmulticast mode [ 254.075156][T19589] bridge0: port 4(macsec0) entered blocking state [ 254.081619][T19589] bridge0: port 4(macsec0) entered disabled state [ 254.093279][T19589] bridge0: left allmulticast mode [ 254.197021][T19599] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5963'. [ 254.270484][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5968'. [ 254.288493][T19609] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.297335][T19609] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.306203][T19609] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.314965][T19609] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.326272][T19609] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.335290][T19609] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.344236][T19609] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.353286][T19609] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.697530][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5987'. [ 254.709432][T19656] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.718399][T19656] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.727262][T19656] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.736128][T19656] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.746309][T19656] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.755310][T19656] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.764215][T19656] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.773145][T19656] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.936198][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5994'. [ 255.053256][T19683] lo speed is unknown, defaulting to 1000 [ 255.186032][T19683] netlink: 'syz.7.6001': attribute type 2 has an invalid length. [ 255.212906][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 255.212962][ T29] audit: type=1400 audit(1750407875.708:6400): avc: denied { read } for pid=19686 comm="syz.6.6002" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.307741][ T29] audit: type=1400 audit(1750407875.808:6401): avc: denied { setopt } for pid=19696 comm="syz.7.6006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.397311][T19704] loop8: detected capacity change from 0 to 164 [ 255.414805][T19704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.424076][T19704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.443338][T19704] Symlink component flag not implemented [ 255.449117][T19704] Symlink component flag not implemented [ 255.467654][T19704] Symlink component flag not implemented (7) [ 255.473661][T19704] Symlink component flag not implemented (116) [ 255.486001][T19710] infiniband syz!: set down [ 255.490604][T19710] infiniband syz!: added team_slave_0 [ 255.511440][T19710] RDS/IB: syz!: added [ 255.519868][T19710] smc: adding ib device syz! with port count 1 [ 255.532760][T19710] smc: ib device syz! port 1 has pnetid [ 255.750684][T19728] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6019'. [ 255.950406][T19745] loop8: detected capacity change from 0 to 256 [ 256.016934][T19756] netlink: 'syz.3.6032': attribute type 7 has an invalid length. [ 256.024734][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6032'. [ 256.340883][T19783] bridge: RTM_NEWNEIGH with invalid ether address [ 256.840694][ T29] audit: type=1326 audit(1750407877.338:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.865211][ T29] audit: type=1326 audit(1750407877.338:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.889569][ T29] audit: type=1326 audit(1750407877.368:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.913287][ T29] audit: type=1326 audit(1750407877.368:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.936902][ T29] audit: type=1326 audit(1750407877.368:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.960632][ T29] audit: type=1326 audit(1750407877.388:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 256.984409][ T29] audit: type=1326 audit(1750407877.388:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 257.008078][ T29] audit: type=1326 audit(1750407877.388:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19792 comm="syz.4.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 257.355436][T19841] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6063'. [ 257.377603][T19841] hsr_slave_0: left promiscuous mode [ 257.386637][T19841] hsr_slave_1: left promiscuous mode [ 257.431425][T19849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19849 comm=syz.7.6066 [ 257.559243][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6071'. [ 257.572835][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6071'. [ 257.741210][T19860] wireguard0: entered promiscuous mode [ 257.747362][T19860] wireguard0: entered allmulticast mode [ 258.090287][T19877] pimreg: entered allmulticast mode [ 258.097251][T19877] pimreg: left allmulticast mode [ 258.111755][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6078'. [ 258.185089][T19881] lo speed is unknown, defaulting to 1000 [ 258.381311][T19900] wireguard0: entered promiscuous mode [ 258.388060][T19900] wireguard0: entered allmulticast mode [ 258.419044][T19903] lo speed is unknown, defaulting to 1000 [ 258.467506][T19913] loop4: detected capacity change from 0 to 1024 [ 258.488582][T19913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.505345][T19913] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.6092: Allocating blocks 385-513 which overlap fs metadata [ 258.520110][T19912] EXT4-fs (loop4): pa ffff888100493310: logic 16, phys. 129, len 24 [ 258.528188][T19912] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 258.550417][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.609444][T19924] loop8: detected capacity change from 0 to 256 [ 258.617177][T19924] FAT-fs (loop8): bogus number of FAT sectors [ 258.623350][T19924] FAT-fs (loop8): Can't find a valid FAT filesystem [ 258.630486][T19923] loop4: detected capacity change from 0 to 1024 [ 258.667929][T19923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.714798][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.741927][T19936] 9pnet: p9_errstr2errno: server reported unknown error [ 258.808973][T19942] loop4: detected capacity change from 0 to 2048 [ 258.875387][T19942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 258.929341][T19956] xt_hashlimit: max too large, truncated to 1048576 [ 259.019100][T19960] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 259.039065][T19960] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 736 with error 28 [ 259.051503][T19960] EXT4-fs (loop4): This should not happen!! Data will be lost [ 259.051503][T19960] [ 259.061175][T19960] EXT4-fs (loop4): Total free blocks count 0 [ 259.067276][T19960] EXT4-fs (loop4): Free/Dirty block details [ 259.073207][T19960] EXT4-fs (loop4): free_blocks=2415919104 [ 259.078996][T19960] EXT4-fs (loop4): dirty_blocks=752 [ 259.084222][T19960] EXT4-fs (loop4): Block reservation details [ 259.090268][T19960] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 259.114314][T19972] lo speed is unknown, defaulting to 1000 [ 259.636754][ T4627] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 260.092910][T20016] program syz.8.6131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.311447][T20043] lo speed is unknown, defaulting to 1000 [ 260.335360][T20048] __nla_validate_parse: 1 callbacks suppressed [ 260.335376][T20048] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6143'. [ 260.580635][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 260.580651][ T29] audit: type=1326 audit(1750407881.078:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20064 comm="syz.8.6149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fc405e929 code=0x0 [ 260.633787][T20066] loop8: detected capacity change from 0 to 164 [ 260.642751][T20066] syz.8.6149: attempt to access beyond end of device [ 260.642751][T20066] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.657576][T20066] syz.8.6149: attempt to access beyond end of device [ 260.657576][T20066] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.688857][ T29] audit: type=1326 audit(1750407881.188:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.712466][ T29] audit: type=1326 audit(1750407881.188:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.736064][ T29] audit: type=1326 audit(1750407881.188:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.759610][ T29] audit: type=1326 audit(1750407881.188:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.783203][ T29] audit: type=1326 audit(1750407881.188:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.806753][ T29] audit: type=1326 audit(1750407881.188:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.834767][ T29] audit: type=1326 audit(1750407881.188:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.858616][ T29] audit: type=1326 audit(1750407881.188:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.882255][ T29] audit: type=1326 audit(1750407881.188:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.7.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 260.906120][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6153'. [ 260.964335][T20079] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6154'. [ 260.985437][T20082] pim6reg1: entered promiscuous mode [ 260.990755][T20082] pim6reg1: entered allmulticast mode [ 261.193899][T20102] lo speed is unknown, defaulting to 1000 [ 261.213410][T20100] lo speed is unknown, defaulting to 1000 [ 261.463431][T20109] wireguard1: entered promiscuous mode [ 261.469357][T20109] wireguard1: entered allmulticast mode [ 261.690516][T20116] loop8: detected capacity change from 0 to 2048 [ 261.716502][T20116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.752144][T20121] loop4: detected capacity change from 0 to 512 [ 261.762712][T20121] EXT4-fs: Ignoring removed bh option [ 261.776531][T20121] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.785628][T20121] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 261.795919][T20122] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 261.804979][T20121] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 261.822019][T20122] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 261.834267][T20122] EXT4-fs (loop8): This should not happen!! Data will be lost [ 261.834267][T20122] [ 261.835622][T20121] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 261.843952][T20122] EXT4-fs (loop8): Total free blocks count 0 [ 261.858108][T20122] EXT4-fs (loop8): Free/Dirty block details [ 261.864095][T20122] EXT4-fs (loop8): free_blocks=2415919504 [ 261.869959][T20122] EXT4-fs (loop8): dirty_blocks=2816 [ 261.871909][T20125] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.875300][T20122] EXT4-fs (loop8): Block reservation details [ 261.888536][T20122] EXT4-fs (loop8): i_reserved_data_blocks=176 [ 261.890760][T20121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.901755][T20122] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 261.960130][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.041014][T20135] netlink: 'syz.4.6174': attribute type 39 has an invalid length. [ 262.072825][T20137] netdevsim netdevsim7: Direct firmware load for .. failed with error -2 [ 262.349598][T20154] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6184'. [ 262.359445][T20154] hsr_slave_0: left promiscuous mode [ 262.365546][T20154] hsr_slave_1: left promiscuous mode [ 262.439588][T20157] loop8: detected capacity change from 0 to 128 [ 262.466678][T20161] netlink: 'syz.4.6185': attribute type 1 has an invalid length. [ 262.481382][T20161] bond1: entered promiscuous mode [ 262.486813][T20161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.520393][T20161] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6185'. [ 262.532967][T20161] batadv1: entered promiscuous mode [ 262.538232][T20161] batadv1: entered allmulticast mode [ 262.544988][T20161] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 262.553070][T20161] bond1: (slave batadv1): making interface the new active one [ 262.561501][T20161] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 262.571837][T20161] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6185'. [ 262.583856][T20161] batadv2: entered promiscuous mode [ 262.589124][T20161] batadv2: entered allmulticast mode [ 262.596334][T20161] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 262.605257][T20161] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 262.678126][T20168] bridge: RTM_NEWNEIGH with invalid ether address [ 262.713414][T20170] lo speed is unknown, defaulting to 1000 [ 262.854228][T20173] lo speed is unknown, defaulting to 1000 [ 262.960608][T20191] wireguard0: entered promiscuous mode [ 262.966377][T20191] wireguard0: entered allmulticast mode [ 262.991227][T20173] chnl_net:caif_netlink_parms(): no params data found [ 263.071691][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6199'. [ 263.259095][ T4592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.269265][ T4592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.281392][ T4592] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 263.292160][ T4592] bond0 (unregistering): Released all slaves [ 263.302158][ T4592] bond1 (unregistering): Released all slaves [ 263.340441][T20173] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.347870][T20173] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.356095][T20173] bridge_slave_0: entered allmulticast mode [ 263.362749][T20173] bridge_slave_0: entered promiscuous mode [ 263.370386][T20173] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.377463][T20173] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.393370][T20173] bridge_slave_1: entered allmulticast mode [ 263.400355][T20173] bridge_slave_1: entered promiscuous mode [ 263.466481][ T4592] hsr_slave_0: left promiscuous mode [ 263.476482][ T4592] hsr_slave_1: left promiscuous mode [ 263.561500][T20173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.576625][T20173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.625846][T20173] team0: Port device team_slave_0 added [ 263.636178][T20173] team0: Port device team_slave_1 added [ 263.667295][T20173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.674277][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.700376][T20173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.713424][T20173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.720454][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.746492][T20173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.796704][T20236] wg2: entered promiscuous mode [ 263.801648][T20236] wg2: entered allmulticast mode [ 263.809355][T20173] hsr_slave_0: entered promiscuous mode [ 263.825642][T20173] hsr_slave_1: entered promiscuous mode [ 263.841487][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6214'. [ 264.080793][T20260] siw: device registration error -23 [ 264.335014][T20173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.346311][T20173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.367585][T20173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.386024][T20173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.466848][T20267] lo speed is unknown, defaulting to 1000 [ 264.483451][T20173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.513755][T20173] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.528401][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.535490][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.561533][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.568622][ T4627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.677773][T20173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.810493][T20173] veth0_vlan: entered promiscuous mode [ 264.818712][T20173] veth1_vlan: entered promiscuous mode [ 264.835415][T20173] veth0_macvtap: entered promiscuous mode [ 264.842762][T20173] veth1_macvtap: entered promiscuous mode [ 264.854973][T20173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.867803][T20173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.878582][T20173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.887363][T20173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896136][T20173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.904944][T20173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.999755][T20297] loop2: detected capacity change from 0 to 2048 [ 265.056426][T20297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.157464][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6228'. [ 265.187206][T20306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 265.226578][T20306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 265.238852][T20306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 265.238852][T20306] [ 265.248581][T20306] EXT4-fs (loop2): Total free blocks count 0 [ 265.254655][T20306] EXT4-fs (loop2): Free/Dirty block details [ 265.260555][T20306] EXT4-fs (loop2): free_blocks=2415919504 [ 265.266314][T20306] EXT4-fs (loop2): dirty_blocks=1280 [ 265.271611][T20306] EXT4-fs (loop2): Block reservation details [ 265.277677][T20306] EXT4-fs (loop2): i_reserved_data_blocks=80 [ 265.354915][T20306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 265.446239][T20323] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6240'. [ 265.466533][T20320] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.476796][ T1035] IPVS: starting estimator thread 0... [ 265.564677][T20327] IPVS: using max 2592 ests per chain, 129600 per kthread [ 265.656559][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 265.656573][ T29] audit: type=1326 audit(1750407886.108:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.686329][ T29] audit: type=1326 audit(1750407886.108:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.709873][ T29] audit: type=1326 audit(1750407886.118:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.733394][ T29] audit: type=1326 audit(1750407886.118:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.757051][ T29] audit: type=1326 audit(1750407886.118:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.780658][ T29] audit: type=1326 audit(1750407886.118:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.804214][ T29] audit: type=1326 audit(1750407886.118:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.828031][ T29] audit: type=1326 audit(1750407886.118:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.851550][ T29] audit: type=1326 audit(1750407886.128:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.875142][ T29] audit: type=1326 audit(1750407886.128:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20332 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x7ffc0000 [ 265.990487][T20340] netlink: 'syz.4.6248': attribute type 10 has an invalid length. [ 265.998470][T20340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6248'. [ 266.030818][T20340] dummy0: entered promiscuous mode [ 266.121992][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6251'. [ 266.131120][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6251'. [ 266.140091][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6251'. [ 266.154640][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6251'. [ 266.163695][T20346] netlink: 'syz.4.6251': attribute type 6 has an invalid length. [ 266.346610][T20358] loop4: detected capacity change from 0 to 512 [ 266.404496][T20368] loop2: detected capacity change from 0 to 8192 [ 266.417334][T20358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 266.571185][T20358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 266.607484][T20358] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.661517][T20384] lo speed is unknown, defaulting to 1000 [ 266.714411][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.768762][T20393] netlink: 'syz.3.6271': attribute type 1 has an invalid length. [ 266.817393][T20398] siw: device registration error -23 [ 266.822875][T20393] bond2: entered promiscuous mode [ 266.823846][T20401] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6271'. [ 266.832929][T20393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.920864][T20401] batadv1: entered promiscuous mode [ 266.926189][T20401] batadv1: entered allmulticast mode [ 266.933295][T20393] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6271'. [ 266.963065][T20401] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.000275][T20401] bond2: (slave batadv1): making interface the new active one [ 267.019357][T20401] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 267.093281][T20393] batadv2: entered promiscuous mode [ 267.098892][T20393] batadv2: entered allmulticast mode [ 267.111537][T20393] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 267.122805][T20393] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 267.136540][T20411] lo speed is unknown, defaulting to 1000 [ 267.226290][T20437] siw: device registration error -23 [ 267.363659][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6295'. [ 267.377673][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6295'. [ 268.228632][T20475] netlink: 'syz.6.6302': attribute type 7 has an invalid length. [ 268.250362][T20478] siw: device registration error -23 [ 268.325433][T20489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.513501][T20497] wg2: entered promiscuous mode [ 268.518461][T20497] wg2: entered allmulticast mode [ 268.620114][T20489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.682906][T20517] pim6reg1: entered promiscuous mode [ 268.688579][T20517] pim6reg1: entered allmulticast mode [ 268.717862][T20489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.787612][T20489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.872860][T20489] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.884472][T20489] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.896341][T20489] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.908167][T20489] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.334715][T20534] Set syz1 is full, maxelem 65536 reached [ 269.582992][T20548] lo speed is unknown, defaulting to 1000 [ 269.687885][T20577] xt_hashlimit: size too large, truncated to 1048576 [ 270.256072][T20617] SET target dimension over the limit! [ 270.298940][T20619] xt_hashlimit: max too large, truncated to 1048576 [ 270.485387][T20629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.541312][T20629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.599986][T20629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.650228][T20629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.742708][T20629] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.782570][T20636] lo speed is unknown, defaulting to 1000 [ 270.794103][T20629] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.808556][T20635] lo speed is unknown, defaulting to 1000 [ 271.080206][T20629] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.102127][T20629] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.321228][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 271.321244][ T29] audit: type=1326 audit(2000000004.000:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.393989][ T29] audit: type=1326 audit(2000000004.000:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.417576][ T29] audit: type=1326 audit(2000000004.040:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.441329][ T29] audit: type=1326 audit(2000000004.060:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20651 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2408411e5 code=0x7ffc0000 [ 271.464856][ T29] audit: type=1326 audit(2000000004.060:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.488440][ T29] audit: type=1326 audit(2000000004.060:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.512035][ T29] audit: type=1326 audit(2000000004.070:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.535589][ T29] audit: type=1326 audit(2000000004.070:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.559171][ T29] audit: type=1326 audit(2000000004.070:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.582664][ T29] audit: type=1326 audit(2000000004.070:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20646 comm="syz.7.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 271.919320][T20683] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 272.000308][T20687] SELinux: failed to load policy [ 272.068747][T20693] __nla_validate_parse: 2 callbacks suppressed [ 272.068766][T20693] netlink: 2564 bytes leftover after parsing attributes in process `syz.4.6391'. [ 272.351976][T20713] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.6399'. [ 272.878147][T20733] wg2: left promiscuous mode [ 272.882895][T20733] wg2: left allmulticast mode [ 272.895134][T20733] wg2: entered promiscuous mode [ 272.900064][T20733] wg2: entered allmulticast mode [ 273.032169][T20752] netlink: 'syz.6.6423': attribute type 1 has an invalid length. [ 273.051574][T20752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.073271][T20752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.080711][T20752] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 273.092298][T20752] bond4: (slave vti0): Error -95 calling set_mac_address [ 273.192793][T20760] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.237717][T20762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.250699][T20760] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.296757][T20760] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.356307][T20760] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.413044][T20760] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.424546][T20760] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.435852][T20760] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.447091][T20760] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.631721][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6418'. [ 273.769876][T20773] ip6gre1: entered allmulticast mode [ 274.176599][T20830] netlink: 'syz.3.6433': attribute type 1 has an invalid length. [ 274.192902][T20830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.213512][T20830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.221144][T20830] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 274.232563][T20830] bond3: (slave vti0): Error -95 calling set_mac_address [ 275.343051][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6459'. [ 275.370017][T20991] wg2: left promiscuous mode [ 275.374735][T20991] wg2: left allmulticast mode [ 275.435684][T20991] wg2: entered promiscuous mode [ 275.440589][T20991] wg2: entered allmulticast mode [ 275.451499][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6464'. [ 275.478237][T20999] IPVS: Unknown mcast interface: vcan0 [ 275.492336][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'. [ 275.501321][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'. [ 275.516125][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'. [ 275.588514][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6471'. [ 275.927898][T21035] netlink: 'syz.7.6480': attribute type 1 has an invalid length. [ 275.993095][T21035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.021524][T21037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.045243][T21037] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 276.072319][T21037] bond3: (slave vti0): Error -95 calling set_mac_address [ 276.086949][T21039] netlink: 'syz.3.6481': attribute type 27 has an invalid length. [ 276.114106][T21039] wg2: left promiscuous mode [ 276.118770][T21039] wg2: left allmulticast mode [ 276.151918][T21039] veth23: left promiscuous mode [ 276.166144][T21039] team2: left promiscuous mode [ 276.179248][T21039] team2: left allmulticast mode [ 276.199791][T21039] bond2: left promiscuous mode [ 276.212606][T21039] batadv1: left promiscuous mode [ 276.217794][T21039] batadv1: left allmulticast mode [ 276.223594][T21039] batadv2: left promiscuous mode [ 276.228681][T21039] batadv2: left allmulticast mode [ 276.355972][T21042] bond0: (slave netdevsim1): Releasing backup interface [ 276.485019][T21062] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6492'. [ 276.592247][T21075] netlink: 'syz.7.6496': attribute type 27 has an invalid length. [ 276.674316][T21075] wg2: left promiscuous mode [ 276.679011][T21075] wg2: left allmulticast mode [ 276.684241][T21075] veth0_vlan: left allmulticast mode [ 276.696808][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 276.696821][ T29] audit: type=1400 audit(2000000009.380:7060): avc: denied { ioctl } for pid=21077 comm="syz.4.6498" path="socket:[54841]" dev="sockfs" ino=54841 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.749188][T21075] team2: left promiscuous mode [ 276.760359][T21075] team2: left allmulticast mode [ 276.772165][T21075] team3: left promiscuous mode [ 276.786129][T21075] team3: left allmulticast mode [ 276.815951][T21075] wireguard0: left promiscuous mode [ 276.821210][T21075] wireguard0: left allmulticast mode [ 277.047739][T21059] syz.6.6490 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 277.061797][T21059] CPU: 0 UID: 0 PID: 21059 Comm: syz.6.6490 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 277.061908][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.061930][T21059] Call Trace: [ 277.061937][T21059] [ 277.061945][T21059] __dump_stack+0x1d/0x30 [ 277.061969][T21059] dump_stack_lvl+0xe8/0x140 [ 277.061991][T21059] dump_stack+0x15/0x1b [ 277.062010][T21059] dump_header+0x81/0x220 [ 277.062082][T21059] oom_kill_process+0x334/0x3f0 [ 277.062117][T21059] out_of_memory+0x979/0xb80 [ 277.062208][T21059] try_charge_memcg+0x5e6/0x9e0 [ 277.062241][T21059] obj_cgroup_charge_pages+0xa6/0x150 [ 277.062327][T21059] __memcg_kmem_charge_page+0x9f/0x170 [ 277.062362][T21059] __alloc_frozen_pages_noprof+0x188/0x360 [ 277.062468][T21059] alloc_pages_mpol+0xb3/0x250 [ 277.062505][T21059] alloc_pages_noprof+0x90/0x130 [ 277.062699][T21059] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 277.062789][T21059] __kvmalloc_node_noprof+0x30f/0x4e0 [ 277.062821][T21059] ? ip_set_alloc+0x1f/0x30 [ 277.062896][T21059] ? ip_set_alloc+0x1f/0x30 [ 277.062936][T21059] ? __kmalloc_cache_noprof+0x189/0x320 [ 277.062970][T21059] ip_set_alloc+0x1f/0x30 [ 277.062997][T21059] hash_netiface_create+0x282/0x740 [ 277.063032][T21059] ? __pfx_hash_netiface_create+0x10/0x10 [ 277.063116][T21059] ip_set_create+0x3cc/0x960 [ 277.063159][T21059] ? __nla_parse+0x40/0x60 [ 277.063175][T21059] nfnetlink_rcv_msg+0x4c3/0x590 [ 277.063223][T21059] ? selinux_capable+0x1f9/0x270 [ 277.063260][T21059] netlink_rcv_skb+0x123/0x220 [ 277.063296][T21059] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 277.063393][T21059] nfnetlink_rcv+0x16b/0x1690 [ 277.063432][T21059] ? inat_get_opcode_attribute+0xc/0x20 [ 277.063466][T21059] ? insn_get_prefixes+0x99d/0xbe0 [ 277.063509][T21059] ? insn_get_prefixes+0x99d/0xbe0 [ 277.063537][T21059] ? inat_get_opcode_attribute+0xc/0x20 [ 277.063645][T21059] ? insn_get_opcode+0x750/0x790 [ 277.063736][T21059] ? insn_get_modrm+0x32a/0x360 [ 277.063765][T21059] ? insn_get_modrm+0x32a/0x360 [ 277.063865][T21059] ? should_fail_ex+0x30/0x280 [ 277.063893][T21059] ? selinux_nlmsg_lookup+0x99/0x890 [ 277.063928][T21059] ? selinux_netlink_send+0x59f/0x5f0 [ 277.064036][T21059] ? __rcu_read_unlock+0x34/0x70 [ 277.064063][T21059] ? __netlink_lookup+0x266/0x2a0 [ 277.064089][T21059] netlink_unicast+0x59e/0x670 [ 277.064124][T21059] netlink_sendmsg+0x58b/0x6b0 [ 277.064153][T21059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.064169][T21059] __sock_sendmsg+0x145/0x180 [ 277.064191][T21059] ____sys_sendmsg+0x31e/0x4e0 [ 277.064232][T21059] ___sys_sendmsg+0x17b/0x1d0 [ 277.064317][T21059] __x64_sys_sendmsg+0xd4/0x160 [ 277.064348][T21059] x64_sys_call+0x2999/0x2fb0 [ 277.064404][T21059] do_syscall_64+0xd2/0x200 [ 277.064471][T21059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.064500][T21059] ? clear_bhb_loop+0x40/0x90 [ 277.064555][T21059] ? clear_bhb_loop+0x40/0x90 [ 277.064579][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.064599][T21059] RIP: 0033:0x7f7380f0e929 [ 277.064621][T21059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.064699][T21059] RSP: 002b:00007f737f577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.064714][T21059] RAX: ffffffffffffffda RBX: 00007f7381135fa0 RCX: 00007f7380f0e929 [ 277.064725][T21059] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 277.064796][T21059] RBP: 00007f7380f90b39 R08: 0000000000000000 R09: 0000000000000000 [ 277.064806][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.064816][T21059] R13: 0000000000000000 R14: 00007f7381135fa0 R15: 00007ffec0b68ea8 [ 277.064908][T21059] [ 277.171722][ T29] audit: type=1400 audit(2000000009.810:7061): avc: denied { map } for pid=21093 comm="syz.3.6504" path="socket:[54880]" dev="sockfs" ino=54880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.172401][T21059] memory: usage 307200kB, limit 307200kB, failcnt 209 [ 277.459290][T21059] memory+swap: usage 308392kB, limit 9007199254740988kB, failcnt 0 [ 277.467240][T21059] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 277.474624][T21059] Memory cgroup stats for /syz6: [ 277.475020][T21059] cache 0 [ 277.483052][T21059] rss 0 [ 277.486056][T21059] shmem 0 [ 277.489013][T21059] mapped_file 3149824 [ 277.493136][T21059] dirty 0 [ 277.496215][T21059] writeback 0 [ 277.499518][T21059] workingset_refault_anon 826 [ 277.504259][T21059] workingset_refault_file 2445 [ 277.509134][T21059] swap 1220608 [ 277.512545][T21059] swapcached 12288 [ 277.516328][T21059] pgpgin 576979 [ 277.519870][T21059] pgpgout 576976 [ 277.523434][T21059] pgfault 316840 [ 277.527050][T21059] pgmajfault 127 [ 277.530615][T21059] inactive_anon 12288 [ 277.534656][T21059] active_anon 0 [ 277.538130][T21059] inactive_file 0 [ 277.541783][T21059] active_file 0 [ 277.545336][T21059] unevictable 0 [ 277.548863][T21059] hierarchical_memory_limit 314572800 [ 277.554314][T21059] hierarchical_memsw_limit 9223372036854771712 [ 277.560615][T21059] total_cache 0 [ 277.564622][T21059] total_rss 0 [ 277.568362][T21059] total_shmem 0 [ 277.571837][T21059] total_mapped_file 3149824 [ 277.576364][T21059] total_dirty 0 [ 277.579839][T21059] total_writeback 0 [ 277.583769][T21059] total_workingset_refault_anon 826 [ 277.589071][T21059] total_workingset_refault_file 2445 [ 277.589619][ T29] audit: type=1326 audit(2000000010.270:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.594370][T21059] total_swap 1220608 [ 277.594378][T21059] total_swapcached 12288 [ 277.594385][T21059] total_pgpgin 576979 [ 277.617943][ T29] audit: type=1326 audit(2000000010.270:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.621749][T21059] total_pgpgout 576976 [ 277.621757][T21059] total_pgfault 316840 [ 277.621763][T21059] total_pgmajfault 127 [ 277.621769][T21059] total_inactive_anon 12288 [ 277.621775][T21059] total_active_anon 0 [ 277.621781][T21059] total_inactive_file 0 [ 277.621787][T21059] total_active_file 0 [ 277.621793][T21059] total_unevictable 0 [ 277.621799][T21059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6 [ 277.626101][ T29] audit: type=1326 audit(2000000010.270:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.630056][T21059] ,task_memcg= [ 277.653613][ T29] audit: type=1326 audit(2000000010.270:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.657579][T21059] /syz6,task=syz.6.6490,pid=21058,uid=0 [ 277.657610][T21059] Memory cgroup out of memory: Killed process 21058 (syz.6.6490) total-vm:98876kB, anon-rss:936kB, file-rss:25252kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 277.661703][ T29] audit: type=1326 audit(2000000010.270:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.793422][ T29] audit: type=1326 audit(2000000010.270:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.816982][ T29] audit: type=1326 audit(2000000010.270:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.840470][ T29] audit: type=1326 audit(2000000010.270:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21104 comm="syz.7.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 277.918256][T21113] netlink: 'syz.7.6512': attribute type 2 has an invalid length. [ 277.928702][T21113] netlink: 'syz.7.6512': attribute type 1 has an invalid length. [ 277.936690][T21113] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.6512'. [ 278.093843][T21130] loop4: detected capacity change from 0 to 512 [ 278.100742][T21130] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.109573][T21130] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 278.161447][T21130] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.6519: iget: bad extended attribute block 1 [ 278.175924][T21130] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6519: couldn't read orphan inode 15 (err -117) [ 278.188970][T21130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.437682][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.461026][T21160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.470792][T21160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.503948][T21160] loop8: detected capacity change from 128 to 126 [ 278.788626][T21189] loop2: detected capacity change from 0 to 512 [ 278.795647][T21189] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.802658][T21189] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 278.814686][T21189] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.6541: iget: bad extended attribute block 1 [ 278.829871][T21189] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6541: couldn't read orphan inode 15 (err -117) [ 278.855580][T21189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.348386][T21194] tipc: Started in network mode [ 279.353380][T21194] tipc: Node identity ac14140f, cluster identity 4711 [ 279.477212][T21194] tipc: New replicast peer: 0.0.255.255 [ 279.482874][T21194] tipc: Enabled bearer , priority 10 [ 279.596754][T21200] loop4: detected capacity change from 0 to 512 [ 279.608076][T21200] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6544: corrupted in-inode xattr: invalid ea_ino [ 279.632945][T21200] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6544: couldn't read orphan inode 15 (err -117) [ 279.648135][T21200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.736390][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.796540][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.084024][T21234] vlan0: entered promiscuous mode [ 280.089113][T21234] ip6gretap0: entered promiscuous mode [ 280.594421][T13080] tipc: Node number set to 2886997007 [ 280.738955][T21265] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6569'. [ 281.207327][T21299] loop2: detected capacity change from 0 to 512 [ 281.219574][T21299] EXT4-fs: Ignoring removed bh option [ 281.304326][T21299] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.313426][T21299] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 281.353417][T21299] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 281.414498][T21299] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 281.463621][T21299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.538314][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.790387][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6604'. [ 282.402872][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 282.402959][ T29] audit: type=1326 audit(2000000015.080:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.440792][ T29] audit: type=1326 audit(2000000015.080:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.465568][ T29] audit: type=1326 audit(2000000015.080:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.489286][ T29] audit: type=1326 audit(2000000015.080:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.514079][ T29] audit: type=1326 audit(2000000015.080:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.538492][ T29] audit: type=1326 audit(2000000015.080:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.562591][ T29] audit: type=1326 audit(2000000015.080:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.587415][ T29] audit: type=1326 audit(2000000015.080:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.611170][ T29] audit: type=1326 audit(2000000015.080:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.635997][ T29] audit: type=1326 audit(2000000015.080:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21371 comm="syz.7.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 282.707244][T21384] netlink: '+}[@': attribute type 5 has an invalid length. [ 282.714539][T21384] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 282.732340][T21384] : renamed from bond0 [ 282.920659][ T1035] hid-generic 0000:0000:30303000.0004: unknown main item tag 0x3 [ 282.943859][ T1035] hid-generic 0000:0000:30303000.0004: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 283.102175][T21412] hid-generic 0000:0000:30303000.0004: pid 21412 passed too large report [ 283.117142][T21433] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6640'. [ 283.152057][T21439] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6643'. [ 283.162409][T21439] bond0 (unregistering): Released all slaves [ 283.194552][T21440] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6642'. [ 283.203810][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6642'. [ 283.229817][T21442] wg2: left promiscuous mode [ 283.234524][T21442] wg2: left allmulticast mode [ 283.243450][T21442] wg2: entered promiscuous mode [ 283.248357][T21442] wg2: entered allmulticast mode [ 283.591197][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6651'. [ 283.689801][T21466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.725840][T21466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.778438][T21466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.815612][T21466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.882601][T21466] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.898265][T21466] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.914278][T21466] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.931562][T21466] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.954229][T21482] lo speed is unknown, defaulting to 1000 [ 284.167700][T21499] bridge_slave_0: left allmulticast mode [ 284.173413][T21499] bridge_slave_0: left promiscuous mode [ 284.179251][T21499] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.196803][T21499] bridge_slave_1: left allmulticast mode [ 284.202518][T21499] bridge_slave_1: left promiscuous mode [ 284.208260][T21499] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.225135][T21499] bond0: (slave bond_slave_0): Releasing backup interface [ 284.236357][T21499] bond0: (slave bond_slave_1): Releasing backup interface [ 284.265413][T21499] team0: Port device team_slave_0 removed [ 284.294581][T21499] team0: Port device team_slave_1 removed [ 284.304981][T21499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.312433][T21499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.331645][T21499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.339600][T21499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.365870][T21499] bond1: (slave batadv1): Releasing active interface [ 284.372606][T21499] bond1: (slave batadv1): the permanent HWaddr of slave - a6:84:e5:1f:09:93 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 284.395247][T21499] bond1: (slave batadv2): making interface the new active one [ 284.409251][T21499] bond1: (slave batadv2): Releasing active interface [ 284.638423][T21517] netlink: 'syz.6.6675': attribute type 27 has an invalid length. [ 284.656618][T21517] wg2: left promiscuous mode [ 284.661248][T21517] wg2: left allmulticast mode [ 284.668690][T21517] batadv_slave_0: left promiscuous mode [ 284.675621][T21517] veth11: left promiscuous mode [ 284.681135][T21517] team2: left promiscuous mode [ 284.693453][T21517] team2: left allmulticast mode [ 284.699706][T21517] ip6gre1: left allmulticast mode [ 284.725182][T21521] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.734406][T21521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.887135][T21532] vhci_hcd: invalid port number 236 [ 284.892413][T21532] vhci_hcd: invalid port number 236 [ 284.952533][T21537] loop4: detected capacity change from 0 to 1024 [ 284.962593][T21537] EXT4-fs: Ignoring removed orlov option [ 284.970914][T21537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.584842][T21567] loop2: detected capacity change from 0 to 2048 [ 285.594235][T21567] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.615759][T21567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.636907][T21578] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.6691'. [ 285.660518][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6692'. [ 285.702043][T21585] batadv_slave_0: entered promiscuous mode [ 285.728746][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6693'. [ 285.751064][T21585] batadv_slave_0 (unregistering): left promiscuous mode [ 285.875508][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6696'. [ 285.892935][T21587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6689: bg 0: block 234: padding at end of block bitmap is not set [ 285.921665][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.961708][T21587] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 285.975390][T21587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.975390][T21587] [ 285.996476][T21618] loop4: detected capacity change from 0 to 4096 [ 286.015521][T21618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.032541][ T2810] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 286.045487][ T2810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 286.045487][ T2810] [ 286.055173][ T2810] EXT4-fs (loop2): Total free blocks count 0 [ 286.061198][ T2810] EXT4-fs (loop2): Free/Dirty block details [ 286.067163][ T2810] EXT4-fs (loop2): free_blocks=0 [ 286.072134][ T2810] EXT4-fs (loop2): dirty_blocks=4096 [ 286.077477][ T2810] EXT4-fs (loop2): Block reservation details [ 286.111373][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.219313][T21632] tipc: Enabled bearer , priority 0 [ 286.242417][T21641] loop2: detected capacity change from 0 to 1024 [ 286.249401][T21641] EXT4-fs: Ignoring removed bh option [ 286.254971][T21641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.262244][T21630] tipc: Resetting bearer [ 286.273074][T21641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.312100][T21630] tipc: Disabling bearer [ 286.452538][T21663] loop4: detected capacity change from 0 to 2048 [ 286.470034][T21663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.532410][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.571353][T21681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21681 comm=syz.2.6703 [ 286.585317][T21681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21681 comm=syz.2.6703 [ 286.892215][T21719] tipc: Enabling of bearer rejected, failed to enable media [ 287.357448][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.400022][T21755] loop4: detected capacity change from 0 to 128 [ 287.440891][T21757] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.497938][T21757] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.556375][T21757] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.638535][T21757] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.689601][T21757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.701583][T21757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.716191][T21757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.739250][T21757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.752095][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6722'. [ 288.133601][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 288.133615][ T29] audit: type=1326 audit(2000000020.821:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.185592][ T29] audit: type=1326 audit(2000000020.821:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.209164][ T29] audit: type=1326 audit(2000000020.821:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.232762][ T29] audit: type=1326 audit(2000000020.821:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.256286][ T29] audit: type=1326 audit(2000000020.821:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.279794][ T29] audit: type=1326 audit(2000000020.821:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.303370][ T29] audit: type=1326 audit(2000000020.821:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.327015][ T29] audit: type=1326 audit(2000000020.821:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.352658][ T29] audit: type=1326 audit(2000000020.991:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.376346][ T29] audit: type=1326 audit(2000000020.991:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.2.6724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 288.516578][T21797] __nla_validate_parse: 1 callbacks suppressed [ 288.516591][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6735'. [ 288.554424][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6735'. [ 288.555041][T21801] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 288.577900][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6736'. [ 288.588494][T21801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.155541][T21830] netlink: 'syz.4.6748': attribute type 13 has an invalid length. [ 289.332112][T21830] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.341464][T21830] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.350469][T21830] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.358918][T21830] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.426814][T21834] wg2: entered promiscuous mode [ 289.431729][T21834] wg2: entered allmulticast mode [ 289.726518][T21855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6765'. [ 290.356202][T21880] loop4: detected capacity change from 0 to 8192 [ 290.598627][T21908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=133 sclass=netlink_audit_socket pid=21908 comm=syz.6.6781 [ 290.667009][T21913] loop2: detected capacity change from 0 to 1024 [ 290.789079][T21913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.550883][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.917453][T21964] loop4: detected capacity change from 0 to 1024 [ 291.938293][T21964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.057349][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6802'. [ 292.144171][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6807'. [ 292.159500][T21976] 8021q: adding VLAN 0 to HW filter on device team3 [ 292.357299][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6810'. [ 292.561151][T21965] syz.7.6805 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 292.572019][T21965] CPU: 1 UID: 0 PID: 21965 Comm: syz.7.6805 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 292.572081][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.572091][T21965] Call Trace: [ 292.572097][T21965] [ 292.572104][T21965] __dump_stack+0x1d/0x30 [ 292.572165][T21965] dump_stack_lvl+0xe8/0x140 [ 292.572183][T21965] dump_stack+0x15/0x1b [ 292.572200][T21965] dump_header+0x81/0x220 [ 292.572234][T21965] oom_kill_process+0x334/0x3f0 [ 292.572283][T21965] out_of_memory+0x979/0xb80 [ 292.572311][T21965] try_charge_memcg+0x5e6/0x9e0 [ 292.572340][T21965] charge_memcg+0x51/0xc0 [ 292.572444][T21965] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 292.572494][T21965] __read_swap_cache_async+0x1df/0x350 [ 292.572543][T21965] swap_cluster_readahead+0x376/0x3e0 [ 292.572638][T21965] swapin_readahead+0xde/0x6f0 [ 292.572755][T21965] ? __filemap_get_folio+0x4f7/0x6b0 [ 292.572790][T21965] ? __rcu_read_unlock+0x34/0x70 [ 292.572873][T21965] ? swap_cache_get_folio+0x77/0x200 [ 292.572907][T21965] do_swap_page+0x301/0x2430 [ 292.572931][T21965] ? css_rstat_updated+0xcd/0x5b0 [ 292.572998][T21965] ? __pfx_default_wake_function+0x10/0x10 [ 292.573027][T21965] handle_mm_fault+0x9a5/0x2be0 [ 292.573052][T21965] ? mas_walk+0xf2/0x120 [ 292.573095][T21965] do_user_addr_fault+0x636/0x1090 [ 292.573229][T21965] exc_page_fault+0x62/0xa0 [ 292.573277][T21965] asm_exc_page_fault+0x26/0x30 [ 292.573299][T21965] RIP: 0033:0x7fd2406e53be [ 292.573321][T21965] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 f6 27 35 00 85 c0 0f 8e a3 fd ff ff ad 9f fe ff 49 39 c4 73 a0 48 8d 1d d1 0b 35 00 83 3d d6 27 35 [ 292.573340][T21965] RSP: 002b:00007ffc49e39d90 EFLAGS: 00010202 [ 292.573356][T21965] RAX: 0000000000000001 RBX: 00007fd240a37ba0 RCX: 0000000000000000 [ 292.573412][T21965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557ebab808 [ 292.573424][T21965] RBP: 00007fd240a37ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 292.573435][T21965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000047781 [ 292.573446][T21965] R13: 00007fd240a36080 R14: ffffffffffffffff R15: 00007ffc49e39ea0 [ 292.573516][T21965] [ 292.787169][T21965] memory: usage 307200kB, limit 307200kB, failcnt 456 [ 292.793979][T21965] memory+swap: usage 308304kB, limit 9007199254740988kB, failcnt 0 [ 292.801992][T21965] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 292.809370][T21965] Memory cgroup stats for /syz7: [ 292.809701][T21965] cache 0 [ 292.817661][T21965] rss 0 [ 292.820526][T21965] shmem 0 [ 292.823537][T21965] mapped_file 0 [ 292.827005][T21965] dirty 0 [ 292.830053][T21965] writeback 0 [ 292.833476][T21965] workingset_refault_anon 1834 [ 292.838249][T21965] workingset_refault_file 2 [ 292.842788][T21965] swap 1130496 [ 292.846234][T21965] swapcached 0 [ 292.849627][T21965] pgpgin 404209 [ 292.853143][T21965] pgpgout 404209 [ 292.856787][T21965] pgfault 374695 [ 292.860341][T21965] pgmajfault 282 [ 292.863918][T21965] inactive_anon 0 [ 292.867561][T21965] active_anon 0 [ 292.871032][T21965] inactive_file 0 [ 292.874742][T21965] active_file 0 [ 292.878213][T21965] unevictable 0 [ 292.881744][T21965] hierarchical_memory_limit 314572800 [ 292.887148][T21965] hierarchical_memsw_limit 9223372036854771712 [ 292.893383][T21965] total_cache 0 [ 292.896925][T21965] total_rss 0 [ 292.900225][T21965] total_shmem 0 [ 292.903754][T21965] total_mapped_file 0 [ 292.907756][T21965] total_dirty 0 [ 292.911226][T21965] total_writeback 0 [ 292.915063][T21965] total_workingset_refault_anon 1834 [ 292.920357][T21965] total_workingset_refault_file 2 [ 292.925646][T21965] total_swap 1130496 [ 292.929546][T21965] total_swapcached 0 [ 292.933599][T21965] total_pgpgin 404209 [ 292.937622][T21965] total_pgpgout 404209 [ 292.941710][T21965] total_pgfault 374695 [ 292.945791][T21965] total_pgmajfault 282 [ 292.949846][T21965] total_inactive_anon 0 [ 292.954007][T21965] total_active_anon 0 [ 292.958024][T21965] total_inactive_file 0 [ 292.962233][T21965] total_active_file 0 [ 292.966214][T21965] total_unevictable 0 [ 292.970185][T21965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2185,pid=9769,uid=0 [ 292.984808][T21965] Memory cgroup out of memory: Killed process 9769 (syz.7.2185) total-vm:95668kB, anon-rss:948kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 293.024601][T21965] syz.7.6805 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 293.031309][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.035436][T21965] CPU: 1 UID: 0 PID: 21965 Comm: syz.7.6805 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 293.035541][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.035602][T21965] Call Trace: [ 293.035606][T21965] [ 293.035614][T21965] __dump_stack+0x1d/0x30 [ 293.035641][T21965] dump_stack_lvl+0xe8/0x140 [ 293.035662][T21965] dump_stack+0x15/0x1b [ 293.035780][T21965] dump_header+0x81/0x220 [ 293.035815][T21965] oom_kill_process+0x334/0x3f0 [ 293.035859][T21965] out_of_memory+0x979/0xb80 [ 293.035924][T21965] try_charge_memcg+0x5e6/0x9e0 [ 293.035956][T21965] charge_memcg+0x51/0xc0 [ 293.035990][T21965] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 293.036025][T21965] __read_swap_cache_async+0x1df/0x350 [ 293.036192][T21965] swap_cluster_readahead+0x376/0x3e0 [ 293.036232][T21965] swapin_readahead+0xde/0x6f0 [ 293.036265][T21965] ? __filemap_get_folio+0x4f7/0x6b0 [ 293.036319][T21965] ? __rcu_read_unlock+0x34/0x70 [ 293.036340][T21965] ? swap_cache_get_folio+0x77/0x200 [ 293.036434][T21965] do_swap_page+0x301/0x2430 [ 293.036457][T21965] ? css_rstat_updated+0xcd/0x5b0 [ 293.036489][T21965] ? __pfx_default_wake_function+0x10/0x10 [ 293.036586][T21965] handle_mm_fault+0x9a5/0x2be0 [ 293.036623][T21965] ? mas_walk+0xf2/0x120 [ 293.036676][T21965] do_user_addr_fault+0x636/0x1090 [ 293.036762][T21965] exc_page_fault+0x62/0xa0 [ 293.036796][T21965] asm_exc_page_fault+0x26/0x30 [ 293.036819][T21965] RIP: 0033:0x7fd2406e53be [ 293.036837][T21965] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 f6 27 35 00 85 c0 0f 8e a3 fd ff ff ad 9f fe ff 49 39 c4 73 a0 48 8d 1d d1 0b 35 00 83 3d d6 27 35 [ 293.036943][T21965] RSP: 002b:00007ffc49e39d90 EFLAGS: 00010202 [ 293.036962][T21965] RAX: 0000000000000001 RBX: 00007fd240a37ba0 RCX: 0000000000000000 [ 293.036986][T21965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557ebab808 [ 293.037001][T21965] RBP: 00007fd240a37ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 293.037015][T21965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000047781 [ 293.037028][T21965] R13: 00007fd240a36080 R14: ffffffffffffffff R15: 00007ffc49e39ea0 [ 293.037053][T21965] [ 293.037061][T21965] memory: usage 307200kB, limit 307200kB, failcnt 528 [ 293.180381][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 293.180399][ T29] audit: type=1326 audit(2000000025.871:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.182492][T21965] memory+swap: usage 308204kB, limit 9007199254740988kB, failcnt 0 [ 293.221593][ T29] audit: type=1326 audit(2000000025.901:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.225530][T21965] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 293.225546][T21965] Memory cgroup stats for /syz7: [ 293.225756][T21965] cache 0 [ 293.255762][ T29] audit: type=1326 audit(2000000025.941:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.257713][T21965] rss 0 [ 293.261034][ T29] audit: type=1326 audit(2000000025.951:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.267485][T21965] shmem 0 [ 293.267523][T21965] mapped_file 0 [ 293.267530][T21965] dirty 0 [ 293.267536][T21965] writeback 0 [ 293.267543][T21965] workingset_refault_anon 1834 [ 293.267550][T21965] workingset_refault_file 2 [ 293.267557][T21965] swap 1130496 [ 293.267564][T21965] swapcached 0 [ 293.267570][T21965] pgpgin 404209 [ 293.267577][T21965] pgpgout 404209 [ 293.267584][T21965] pgfault 374695 [ 293.267593][T21965] pgmajfault 282 [ 293.267600][T21965] inactive_anon 0 [ 293.267607][T21965] active_anon 0 [ 293.267618][T21965] inactive_file 0 [ 293.267626][T21965] active_file 0 [ 293.267633][T21965] unevictable 0 [ 293.267640][T21965] hierarchical_memory_limit 314572800 [ 293.267649][T21965] hierarchical_memsw_limit 9223372036854771712 [ 293.267657][T21965] total_cache 0 [ 293.267664][T21965] total_rss 0 [ 293.267743][T21965] total_shmem 0 [ 293.267750][T21965] total_mapped_file 0 [ 293.267757][T21965] total_dirty 0 [ 293.267763][T21965] total_writeback 0 [ 293.267770][T21965] total_workingset_refault_anon 1834 [ 293.267779][T21965] total_workingset_refault_file 2 [ 293.267787][T21965] total_swap 1130496 [ 293.267858][T21965] total_swapcached 0 [ 293.267866][T21965] total_pgpgin 404209 [ 293.267875][T21965] total_pgpgout 404209 [ 293.267885][T21965] total_pgfault 374695 [ 293.267894][T21965] total_pgmajfault 282 [ 293.267903][T21965] total_inactive_anon 0 [ 293.267911][T21965] total_active_anon 0 [ 293.267918][T21965] total_inactive_file 0 [ 293.267927][T21965] total_active_file 0 [ 293.267936][T21965] total_unevictable 0 [ 293.267945][T21965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6805,pid=21965,uid=0 [ 293.268066][T21965] Memory cgroup out of memory: Killed process 21965 (syz.7.6805) total-vm:95800kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 293.593785][ T29] audit: type=1326 audit(2000000025.991:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.618595][ T29] audit: type=1326 audit(2000000025.991:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.642399][ T29] audit: type=1326 audit(2000000025.991:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.667040][ T29] audit: type=1326 audit(2000000025.991:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.690794][ T29] audit: type=1326 audit(2000000025.991:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.715559][ T29] audit: type=1326 audit(2000000025.991:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22003 comm="syz.6.6818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 293.783207][T22014] netlink: 'syz.3.6822': attribute type 10 has an invalid length. [ 293.791065][T22014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6822'. [ 293.802345][T22014] dummy0: entered promiscuous mode [ 293.809294][T22021] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6825'. [ 293.859109][T22026] lo speed is unknown, defaulting to 1000 [ 294.120735][T22050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6834'. [ 294.285903][T22057] netlink: 'syz.4.6838': attribute type 10 has an invalid length. [ 294.293841][T22057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6838'. [ 294.366540][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6840'. [ 294.402159][T22067] loop4: detected capacity change from 0 to 8192 [ 294.486221][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6848'. [ 294.538087][T22083] loop4: detected capacity change from 0 to 512 [ 294.546579][T22083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.577819][T22083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.595158][T22083] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.627948][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/1:2 [ 294.650613][T22083] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 294.661752][T22092] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 294.676528][T22083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 294.710222][T22083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.731297][T22096] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.983888][T22133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3058 sclass=netlink_route_socket pid=22133 comm=syz.3.6868 [ 295.127559][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6870'. [ 295.757754][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6881'. [ 295.769485][T22164] ipvlan2: entered promiscuous mode [ 295.940946][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6886'. [ 296.643226][T22201] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 296.661028][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6899'. [ 296.791785][T22210] netlink: 'syz.7.6903': attribute type 10 has an invalid length. [ 296.799756][T22210] netlink: 'syz.7.6903': attribute type 19 has an invalid length. [ 296.942190][T22222] syzkaller0: entered promiscuous mode [ 296.949812][T22222] syzkaller0: entered allmulticast mode [ 297.379456][T22246] loop4: detected capacity change from 0 to 1024 [ 297.390409][T22246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.515427][T22253] ref_ctr increment failed for inode: 0x26c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812781ed40 [ 297.530834][T22252] uprobe: syz.2.6922:22252 failed to unregister, leaking uprobe [ 298.112075][T22291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.155643][T22291] vlan0: entered allmulticast mode [ 298.160807][T22291] bond4: entered allmulticast mode [ 298.221955][T22295] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.285209][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.307357][T22295] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.326544][T22300] tipc: Enabling of bearer rejected, failed to enable media [ 298.356049][T22295] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.415685][T22295] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.451297][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 298.451315][ T29] audit: type=1400 audit(2000000031.131:7985): avc: denied { module_load } for pid=22305 comm="syz.4.6944" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 298.509055][T22295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.526500][T22295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.556827][T22295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.606176][T22295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.615617][T22317] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 298.661533][T22313] lo speed is unknown, defaulting to 1000 [ 298.759710][ T29] audit: type=1326 audit(2000000031.441:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.801719][ T29] audit: type=1326 audit(2000000031.471:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.826960][ T29] audit: type=1326 audit(2000000031.471:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.850869][ T29] audit: type=1326 audit(2000000031.471:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.876345][ T29] audit: type=1326 audit(2000000031.471:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.899931][ T29] audit: type=1326 audit(2000000031.471:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.925255][ T29] audit: type=1326 audit(2000000031.471:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.948933][ T29] audit: type=1326 audit(2000000031.471:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 298.974572][ T29] audit: type=1326 audit(2000000031.471:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22324 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 299.112888][T22327] wg2: entered promiscuous mode [ 299.117797][T22327] wg2: entered allmulticast mode [ 299.192124][T22337] netlink: 'syz.2.6959': attribute type 10 has an invalid length. [ 299.200655][T22337] __nla_validate_parse: 9 callbacks suppressed [ 299.200668][T22337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6959'. [ 300.052229][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6985'. [ 300.119488][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6987'. [ 300.145813][T22406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6989'. [ 300.163309][T22406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.182204][T22406] vlan0: entered allmulticast mode [ 300.187578][T22406] bond0: entered allmulticast mode [ 300.421634][T22425] lo speed is unknown, defaulting to 1000 [ 300.531805][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'. [ 300.740683][T22438] ref_ctr increment failed for inode: 0x1be7 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888127819cc0 [ 300.753070][T22437] uprobe: syz.7.7001:22437 failed to unregister, leaking uprobe [ 300.834474][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7005'. [ 301.225430][T22479] SELinux: failed to load policy [ 301.539727][T22493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7022'. [ 301.829247][T22501] loop4: detected capacity change from 0 to 1024 [ 301.836736][T22501] EXT4-fs: Ignoring removed orlov option [ 301.848488][T22501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.095919][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.147530][T22510] lo speed is unknown, defaulting to 1000 [ 302.407124][T22518] netlink: 'syz.7.7033': attribute type 7 has an invalid length. [ 302.415574][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7033'. [ 302.456113][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7034'. [ 302.654851][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 302.668954][T22544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.669575][T22545] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.684641][T22541] team1: entered promiscuous mode [ 302.696343][T22541] team1: entered allmulticast mode [ 303.759282][T22559] Set syz1 is full, maxelem 65536 reached [ 303.839765][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 303.839783][ T29] audit: type=1326 audit(2000000036.521:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 303.896779][ T29] audit: type=1326 audit(2000000036.561:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 303.921014][ T29] audit: type=1326 audit(2000000036.561:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 303.944712][ T29] audit: type=1326 audit(2000000036.561:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 303.969678][ T29] audit: type=1326 audit(2000000036.561:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 303.994661][ T29] audit: type=1326 audit(2000000036.561:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 304.018287][ T29] audit: type=1326 audit(2000000036.561:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 304.043348][ T29] audit: type=1326 audit(2000000036.561:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 304.068825][ T29] audit: type=1326 audit(2000000036.561:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 304.093804][ T29] audit: type=1326 audit(2000000036.561:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.7.7064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24080e929 code=0x7ffc0000 [ 304.418772][T22624] __nla_validate_parse: 1 callbacks suppressed [ 304.418794][T22624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7077'. [ 304.470049][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7077'. [ 304.896692][T22651] netlink: 'syz.7.7087': attribute type 1 has an invalid length. [ 304.940828][T22651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.005617][T22651] vlan0: entered allmulticast mode [ 305.010832][T22651] bond5: entered allmulticast mode [ 305.267773][T22659] loop2: detected capacity change from 0 to 128 [ 305.344360][T22659] EXT4-fs: Ignoring removed oldalloc option [ 305.368745][T22659] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.404726][T22659] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.437327][T22664] lo speed is unknown, defaulting to 1000 [ 305.627851][T22670] tipc: New replicast peer: 255.255.255.255 [ 305.634003][T22670] tipc: Enabled bearer , priority 10 [ 305.921416][T20173] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.972718][T22697] loop4: detected capacity change from 0 to 512 [ 305.990674][T22697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.024750][T22704] loop2: detected capacity change from 0 to 1024 [ 306.035100][T22697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.036215][T22704] EXT4-fs: Ignoring removed orlov option [ 306.062512][T22697] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.142223][T22704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.282750][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.419877][T22718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.451833][T22718] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.487995][T22722] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7115'. [ 306.498802][T22718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.627747][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.731100][T22733] loop2: detected capacity change from 0 to 128 [ 306.742177][T22733] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.757627][T22733] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.814620][T20173] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.875800][ T3614] kernel write not supported for file /619/attr/keycreate (pid: 3614 comm: kworker/1:6) [ 307.902950][T22789] loop4: detected capacity change from 0 to 128 [ 307.910822][T22789] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.924419][T22789] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.970626][T18975] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.007239][T22796] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 308.030828][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7145'. [ 308.075374][T22801] loop4: detected capacity change from 0 to 164 [ 308.085098][T22801] syz.4.7146: attempt to access beyond end of device [ 308.085098][T22801] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 308.099630][T22801] syz.4.7146: attempt to access beyond end of device [ 308.099630][T22801] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 308.191879][T22810] lo speed is unknown, defaulting to 1000 [ 308.295487][T22822] loop9: detected capacity change from 0 to 7 [ 308.301789][T22822] buffer_io_error: 6 callbacks suppressed [ 308.301803][T22822] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.315540][T22822] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.325554][T22822] loop9: unable to read partition table [ 308.331361][T22822] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 308.331361][T22822] U) failed (rc=-5) [ 308.451449][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7158'. [ 308.860100][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 308.860139][ T29] audit: type=1326 audit(2000000041.542:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 308.891943][ T29] audit: type=1326 audit(2000000041.542:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 308.916665][ T29] audit: type=1326 audit(2000000041.542:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 308.940177][ T29] audit: type=1326 audit(2000000041.542:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 308.964965][ T29] audit: type=1326 audit(2000000041.542:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 308.988534][ T29] audit: type=1326 audit(2000000041.542:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 309.013490][ T29] audit: type=1326 audit(2000000041.542:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79eadc58e7 code=0x7ffc0000 [ 309.036987][ T29] audit: type=1326 audit(2000000041.542:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79ead6ab19 code=0x7ffc0000 [ 309.061684][ T29] audit: type=1326 audit(2000000041.542:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 309.086542][ T29] audit: type=1326 audit(2000000041.542:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22838 comm="syz.2.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 309.189692][T22853] netlink: 'syz.3.7166': attribute type 4 has an invalid length. [ 309.202423][T22853] netlink: 'syz.3.7166': attribute type 4 has an invalid length. [ 309.214783][ T6244] lo speed is unknown, defaulting to 1000 [ 309.220667][ T6244] syz0: Port: 1 Link ACTIVE [ 309.300992][T22865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7173'. [ 309.315119][T22865] 8021q: adding VLAN 0 to HW filter on device team2 [ 309.431034][T22868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.456381][T22868] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.480222][T22868] dummy0: left promiscuous mode [ 309.493724][T22868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.621567][T22874] netlink: 'syz.4.7176': attribute type 1 has an invalid length. [ 309.636055][T22874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.657414][T22874] bond2: (slave gretap1): making interface the new active one [ 309.666586][T22874] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 309.681329][T22881] netlink: 'syz.6.7179': attribute type 10 has an invalid length. [ 309.688911][T22874] vlan0: entered allmulticast mode [ 309.690679][T22881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7179'. [ 309.695019][T22874] bond2: entered allmulticast mode [ 309.708534][T22874] gretap1: entered allmulticast mode [ 309.717497][T22874] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 309.747891][T22881] dummy0: entered promiscuous mode [ 309.753642][T22881] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 309.771747][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7180'. [ 310.171750][T22907] atomic_op ffff888170079d28 conn xmit_atomic 0000000000000000 [ 310.352604][T22912] loop4: detected capacity change from 0 to 1024 [ 310.377801][T22917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7191'. [ 310.387204][T22912] EXT4-fs: Ignoring removed nobh option [ 310.387276][T22912] EXT4-fs: Ignoring removed nobh option [ 310.415083][T22912] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 310.653972][T22912] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.7197: inode #4294967295: comm syz.4.7197: iget: illegal inode # [ 310.704441][T22912] EXT4-fs (loop4): no journal found [ 310.709892][T22912] EXT4-fs (loop4): can't get journal size [ 310.730889][T22902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.780024][T22906] lo speed is unknown, defaulting to 1000 [ 310.788474][T22912] EXT4-fs (loop4): failed to initialize system zone (-22) [ 310.807482][T22912] EXT4-fs (loop4): mount failed [ 310.905707][T22923] tipc: Enabling of bearer rejected, failed to enable media [ 311.067566][T22930] loop2: detected capacity change from 0 to 2048 [ 311.142579][T22930] loop2: p1 < > p4 [ 311.147161][T22930] loop2: p4 size 8388608 extends beyond EOD, truncated [ 311.259966][T22942] ip6gre2: entered allmulticast mode [ 311.385222][T22956] netlink: 'syz.2.7207': attribute type 7 has an invalid length. [ 311.394384][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'. [ 311.505718][T22958] netlink: 'syz.2.7209': attribute type 4 has an invalid length. [ 311.555967][T22958] netlink: 'syz.2.7209': attribute type 4 has an invalid length. [ 311.612463][T22964] lo speed is unknown, defaulting to 1000 [ 312.642205][T22988] netlink: 'syz.4.7219': attribute type 4 has an invalid length. [ 312.694032][T22988] netlink: 'syz.4.7219': attribute type 4 has an invalid length. [ 313.149410][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7223'. [ 313.376790][T23010] lo speed is unknown, defaulting to 1000 [ 313.538505][T23014] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7227'. [ 314.013450][T23029] sch_fq: defrate 2048 ignored. [ 314.222608][T23043] lo speed is unknown, defaulting to 1000 [ 314.286138][T23047] loop4: detected capacity change from 0 to 1024 [ 314.341773][T23047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.389985][T23047] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.7240: Allocating blocks 385-513 which overlap fs metadata [ 314.451438][T23046] EXT4-fs (loop4): pa ffff888106a2a8c0: logic 16, phys. 129, len 24 [ 314.459653][T23046] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 314.549771][T23056] netlink: 87 bytes leftover after parsing attributes in process `syz.7.7243'. [ 314.566043][T18975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.664031][T23068] loop2: detected capacity change from 0 to 512 [ 314.693039][T23068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.710125][T23068] EXT4-fs (loop2): 1 truncate cleaned up [ 314.716503][T23068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.998707][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.025561][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7256'. [ 315.123299][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 315.123314][ T29] audit: type=1326 audit(2000000047.812:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 315.169596][ T29] audit: type=1326 audit(2000000047.842:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 315.193658][ T29] audit: type=1326 audit(2000000047.842:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79eadce929 code=0x7ffc0000 [ 315.237254][T23110] xt_CT: No such helper "pptp" [ 315.503421][T23135] loop2: detected capacity change from 0 to 512 [ 315.510736][T23135] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 315.520622][T23135] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 315.532207][T23135] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.7273: Invalid inode table block 0 in block_group 0 [ 315.545144][T23135] EXT4-fs (loop2): get root inode failed [ 315.550801][T23135] EXT4-fs (loop2): mount failed [ 315.797012][T23149] bridge: RTM_NEWNEIGH with invalid ether address [ 315.933378][ T29] audit: type=1326 audit(2000000048.592:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 315.956968][ T29] audit: type=1326 audit(2000000048.592:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 315.981640][ T29] audit: type=1326 audit(2000000048.602:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 316.005621][ T29] audit: type=1326 audit(2000000048.602:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 316.029112][ T29] audit: type=1326 audit(2000000048.602:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 316.053355][ T29] audit: type=1326 audit(2000000048.602:9475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 316.077158][ T29] audit: type=1326 audit(2000000048.602:9476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23156 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7380f0e929 code=0x7ffc0000 [ 316.212885][T23160] ref_ctr increment failed for inode: 0x1d2e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888127819140 [ 316.224678][T23159] uprobe: syz.3.7285:23159 failed to unregister, leaking uprobe [ 316.494330][T23170] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 316.770050][T23135] Set syz1 is full, maxelem 65536 reached [ 316.902988][T23195] lo speed is unknown, defaulting to 1000 [ 316.911153][T23198] xt_hashlimit: size too large, truncated to 1048576 [ 317.169237][T23208] xt_hashlimit: size too large, truncated to 1048576 [ 318.118104][T23220] Set syz1 is full, maxelem 65536 reached [ 318.392655][T23237] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 318.545110][T23245] netlink: 'syz.3.7320': attribute type 4 has an invalid length. [ 318.555348][ T9] lo speed is unknown, defaulting to 1000 [ 318.561170][ T9] syz0: Port: 1 Link DOWN [ 318.569157][T23245] netlink: 'syz.3.7320': attribute type 4 has an invalid length. [ 318.578467][ T6244] lo speed is unknown, defaulting to 1000 [ 318.584302][ T6244] syz0: Port: 1 Link ACTIVE [ 318.610552][T23253] all: renamed from lo (while UP) [ 318.662709][T23262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23262 comm=syz.4.7328 [ 318.693952][T23265] bridge0: entered promiscuous mode [ 318.701722][T23265] macvlan2: entered promiscuous mode [ 318.713462][T23265] bridge0: left promiscuous mode [ 318.751884][ T3614] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 318.759317][ T3614] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 318.766767][ T3614] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 318.777022][ T3614] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 318.937182][T23278] lo speed is unknown, defaulting to 1000 [ 319.136454][T23295] loop2: detected capacity change from 0 to 512 [ 319.166957][T23295] EXT4-fs (loop2): 1 orphan inode deleted [ 319.173449][T23295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.187830][ T4634] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 1 [ 319.200466][T23295] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.215955][T23295] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7339'. [ 319.226497][T23295] netlink: 'syz.2.7339': attribute type 9 has an invalid length. [ 319.234285][T23295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7339'. [ 319.243343][T23295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7339'. [ 319.268748][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.525596][T23310] lo speed is unknown, defaulting to 1000 [ 319.614175][T23318] syzkaller0: entered promiscuous mode [ 319.619700][T23318] syzkaller0: entered allmulticast mode [ 319.712639][T23329] loop4: detected capacity change from 0 to 2048 [ 319.723805][T23329] EXT4-fs (loop4): failed to initialize system zone (-117) [ 319.731088][T23329] EXT4-fs (loop4): mount failed [ 319.737584][T23328] wg2: entered promiscuous mode [ 319.742568][T23328] wg2: entered allmulticast mode [ 319.917131][T23339] lo speed is unknown, defaulting to 1000 [ 320.595991][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 320.596004][ T29] audit: type=1326 audit(2000000053.282:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.4.7366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4154e929 code=0x0 [ 320.902370][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7374'. [ 320.914482][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7374'. [ 321.007264][T23392] lo speed is unknown, defaulting to 1000 [ 321.639891][T23402] lo speed is unknown, defaulting to 1000 [ 322.445108][ T29] audit: type=1326 audit(2000000055.132:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.3.7391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5314afe929 code=0x0 [ 322.554155][ T29] audit: type=1400 audit(2000000055.242:9522): avc: denied { create } for pid=23437 comm="syz.2.7393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.564732][T23438] loop2: detected capacity change from 0 to 512 [ 322.600081][T23441] netlink: 'syz.6.7395': attribute type 10 has an invalid length. [ 322.608084][T23441] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7395'. [ 322.632101][T23438] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 322.671705][T23441] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 322.690094][T23438] EXT4-fs (loop2): orphan cleanup on readonly fs [ 322.711086][T23438] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7393: Block bitmap for bg 0 marked uninitialized [ 322.744985][T23438] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 322.771817][T23438] EXT4-fs (loop2): 1 orphan inode deleted [ 322.793477][T23438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 322.840871][T23438] EXT4-fs (loop2): shut down requested (1) [ 322.852071][ T29] audit: type=1400 audit(2000000055.542:9523): avc: denied { write } for pid=23437 comm="syz.2.7393" path="socket:[62598]" dev="sockfs" ino=62598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.896429][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.361573][ T29] audit: type=1326 audit(2000000056.052:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 323.389363][ T29] audit: type=1326 audit(2000000056.072:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 323.413074][ T29] audit: type=1326 audit(2000000056.072:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 323.436618][ T29] audit: type=1326 audit(2000000056.072:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 323.460333][ T29] audit: type=1326 audit(2000000056.072:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 323.483932][ T29] audit: type=1326 audit(2000000056.072:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.3.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5314afe929 code=0x7ffc0000 [ 324.171150][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7450'. [ 324.684007][T23601] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 324.714727][T23607] rdma_op ffff888160f3c180 conn xmit_rdma 0000000000000000 [ 324.850560][T23628] loop2: detected capacity change from 0 to 1024 [ 324.857233][T23628] EXT4-fs: Ignoring removed orlov option [ 324.865155][T23628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.353154][T23635] ================================================================== [ 325.361279][T23635] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 325.368488][T23635] [ 325.370830][T23635] write to 0xffff8881055429a4 of 4 bytes by task 23628 on cpu 0: [ 325.378553][T23635] __xa_set_mark+0x172/0x1a0 [ 325.383182][T23635] __folio_mark_dirty+0x3af/0x4d0 [ 325.388216][T23635] mark_buffer_dirty+0x11e/0x210 [ 325.393176][T23635] block_write_end+0x12e/0x210 [ 325.397942][T23635] ext4_write_end+0x13a/0x730 [ 325.402648][T23635] generic_perform_write+0x312/0x490 [ 325.407952][T23635] ext4_buffered_write_iter+0x1ee/0x3c0 [ 325.413510][T23635] ext4_file_write_iter+0x383/0xf00 [ 325.418714][T23635] iter_file_splice_write+0x5f2/0x970 [ 325.424118][T23635] direct_splice_actor+0x156/0x2a0 [ 325.429250][T23635] splice_direct_to_actor+0x312/0x680 [ 325.434637][T23635] do_splice_direct+0xda/0x150 [ 325.439416][T23635] do_sendfile+0x380/0x650 [ 325.443838][T23635] __x64_sys_sendfile64+0x105/0x150 [ 325.449054][T23635] x64_sys_call+0xb39/0x2fb0 [ 325.453647][T23635] do_syscall_64+0xd2/0x200 [ 325.458156][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.464060][T23635] [ 325.466383][T23635] read to 0xffff8881055429a4 of 4 bytes by task 23635 on cpu 1: [ 325.474008][T23635] xas_find_marked+0x5dc/0x620 [ 325.478775][T23635] find_get_entry+0x5d/0x380 [ 325.483387][T23635] filemap_get_folios_tag+0x92/0x210 [ 325.488695][T23635] filemap_fdatawait_range+0x88/0x1d0 [ 325.494097][T23635] __writeback_single_inode+0xdb/0x7c0 [ 325.499582][T23635] writeback_single_inode+0x167/0x3e0 [ 325.504958][T23635] sync_inode_metadata+0x5b/0x90 [ 325.509903][T23635] generic_buffers_fsync_noflush+0xd9/0x120 [ 325.515811][T23635] ext4_sync_file+0x1ab/0x690 [ 325.520497][T23635] vfs_fsync_range+0x10d/0x130 [ 325.525302][T23635] ext4_buffered_write_iter+0x34f/0x3c0 [ 325.530860][T23635] ext4_file_write_iter+0x383/0xf00 [ 325.536060][T23635] iter_file_splice_write+0x5f2/0x970 [ 325.541444][T23635] direct_splice_actor+0x156/0x2a0 [ 325.546564][T23635] splice_direct_to_actor+0x312/0x680 [ 325.551961][T23635] do_splice_direct+0xda/0x150 [ 325.556736][T23635] do_sendfile+0x380/0x650 [ 325.561159][T23635] __x64_sys_sendfile64+0x105/0x150 [ 325.566367][T23635] x64_sys_call+0xb39/0x2fb0 [ 325.570963][T23635] do_syscall_64+0xd2/0x200 [ 325.575472][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.581375][T23635] [ 325.583697][T23635] value changed: 0x00000021 -> 0x0a000021 [ 325.589414][T23635] [ 325.591735][T23635] Reported by Kernel Concurrency Sanitizer on: [ 325.597893][T23635] CPU: 1 UID: 0 PID: 23635 Comm: syz.2.7478 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 325.610420][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.620479][T23635] ================================================================== [ 325.763384][T20173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.520997][T13080] page_pool_release_retry() stalled pool shutdown: id 167, 1 inflight 60 sec