last executing test programs: 3m18.125731596s ago: executing program 1 (id=733): pipe(0x0) syz_open_procfs(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 3m18.105350396s ago: executing program 1 (id=735): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3m18.018055117s ago: executing program 1 (id=736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3m17.954318538s ago: executing program 1 (id=739): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) 3m17.83018481s ago: executing program 1 (id=741): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x12, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xe, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0xff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) wait4(0x0, 0x0, 0x80000008, 0x0) 3m17.015890702s ago: executing program 1 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) 3m17.015560992s ago: executing program 32 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) 50.255583053s ago: executing program 2 (id=2286): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000070000000200000004", @ANYRES32, @ANYRES32, @ANYBLOB="00009033000000000000adeb79786fe41a17deeec3b80000000000a9a4e386000000"], 0x50) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) io_uring_setup(0x70c0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 50.174600274s ago: executing program 2 (id=2288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000) 49.945143048s ago: executing program 2 (id=2291): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0xb92, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) unshare(0x24060400) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCGETS2(r3, 0x802c542a, 0x0) sync_file_range(r3, 0x4000000008, 0x3ff, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) 48.737121266s ago: executing program 2 (id=2299): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vgUheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQuxUURnKp2qIOCFgeLgw6R5FqpbURrau6l9/nA5e6Se+73HHff50LgSIDGuppkOkkryWSSTpLi+AZ3V9PVw9X1ie35pNd74udisF21XjlqdyXJWpKHkmyVRV5qJyubz+z9uvPYfW8ud+59f/PpibEe5KH9vd3HD96bfeOjmQdXvvjqx9ki0+n+5bjOXzHkvXaR3PJ/FLtOFO26e8C/Mffah1/3c39rknsG+e+kTHXy3lq6YauTB979u7Zv//Tl7ePsK3D+er1O/x641gMap0zSTVFOJamWy3JqqvoO/03rcvny4tKrky8uLi+8UPdIBZyXbrL76CeXPr5yIv8/tKr8AxdU9aPU7pNzG9/2Fw5adXcIGIs7qln//j/53Or9kX9oHPmH5pJ/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h4vi+zO3OJ5/AKBZepfqfgIZqEvd4w8AAAAAAAAAAAAAAAAAAHDa+sT2/NE0rpqfvZPsP5KkPax+a/B/xMmNg9fLvxT9zf5UVM1G8uxdI+5gRB/U/PT1Td/VW//zO+utv7qQrL2e5Fq7ffr6Kw6vv//u5n/4vPP8iAXOqDix/vBT461/0u8b9daf2Uk+7Y8/14aNP2VuG8yHjz/d/vkbsf4rv424AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbmjwAAAP//+qJuIw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x5b0) close(r1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a00040000000000fc0000000000000000000000000000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000050019000000000002004e2264010101000000000000000002"], 0xc8}}, 0x0) 48.614786908s ago: executing program 2 (id=2301): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 48.562224389s ago: executing program 2 (id=2302): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") 33.153637494s ago: executing program 33 (id=2302): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") 7.695995483s ago: executing program 6 (id=2591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) 5.391051118s ago: executing program 6 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x10) 4.726565498s ago: executing program 6 (id=2608): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 4.370198824s ago: executing program 6 (id=2609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4.185310687s ago: executing program 6 (id=2621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x10) 4.044238919s ago: executing program 6 (id=2616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x8, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x1a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x1ee, 0x27, &(0x7f0000000140)=""/39, 0x41100, 0x6, '\x00', r7, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x5, 0x0, &(0x7f00000002c0)=[{0x3, 0x1, 0x6, 0x7}, {0x2, 0x4, 0x6, 0xa}, {0x5, 0x5, 0xa, 0x2}, {0x3, 0x5, 0xa, 0xc}, {0x0, 0x2, 0xa, 0xc}], 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@updpolicy={0x1c4, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x0, 0xf0}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff8df}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x1}]}, @tfcpad={0x8, 0x16, 0x2}]}, 0x1c4}}, 0x0) 2.900327766s ago: executing program 4 (id=2631): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)={0x24, r4, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) clock_gettime(0x6, 0x0) 2.771525958s ago: executing program 4 (id=2632): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003000000206010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.531136821s ago: executing program 3 (id=2634): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 2.059936539s ago: executing program 3 (id=2637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x4c) readlinkat(r4, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 1.530394317s ago: executing program 5 (id=2641): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x2004) 1.530134207s ago: executing program 4 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.174273743s ago: executing program 3 (id=2643): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)={0x24, r4, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) clock_gettime(0x6, 0x0) 1.109537823s ago: executing program 3 (id=2644): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() openat$pfkey(0xffffffffffffff9c, 0x0, 0x400001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000040)="e69f5fec649c3cf5ff0460af52c551f40d94008b10aab753a0a2b4fbac607e0265658b5b55255d1605c7430f0aec2967e1d6d47324f349dccf807cdaa78692f735f0704287cceb2513b13d28a7616b86c58cdb89a2e4c6c8f11b8631eb9d0aac0d4a2180f13c3280580c16db15a7727627c708aae19104d71ca93d9275b63ac5c15d0a8b1309398295f4f27ec6e0eccbfc8153f8d6d150a035502c1068bdc39bc146b9dd018570a85481781dd9", 0xad}, {&(0x7f0000000180)="9fe2218168b02f4d76a407f0ace6a0d1b43c1b4b1ec80c9147f35dc6e0a6a0598bc3d9e50d8b104dd2a9d6a56ab15bbaed3fde622172913f649be542c89fd8f16409d708531ff9c6e6ad7e941d309c5baac541444cc832015bc57586bc6070c56e7207e1be70c839a647a06790e40dc016a933433b2bfb08ea1eed1d282a8b319460fd3f59cf9e4ac9f09f5c132858a038068ef855f3f4eafd15954e319b0ea7a0d5db98cc032cc31164518a2c592948fd67d8ffb250d55ecb2b97b32ac01f0eb1924d9ac6f90cc43a73637625a765ae7e776a523f09067694dfb4995c95329017599911c34037a44e813971fd", 0xed}, {0x0}], 0x3, 0x0, 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 972.503456ms ago: executing program 3 (id=2645): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a0102"], 0x1c}}, 0x0) openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 971.489956ms ago: executing program 5 (id=2655): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 964.352736ms ago: executing program 4 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 895.244127ms ago: executing program 5 (id=2647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 848.708347ms ago: executing program 5 (id=2648): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x43403d05, 0x0) 848.523278ms ago: executing program 4 (id=2649): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 791.406668ms ago: executing program 5 (id=2650): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 769.085039ms ago: executing program 0 (id=2651): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1a9041, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 576.563271ms ago: executing program 0 (id=2652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26000400) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 457.951503ms ago: executing program 0 (id=2653): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ff4000/0x3000)=nil, 0x3000) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a2100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000340)={&(0x7f0000002000)={[{&(0x7f0000000540)="f031b7f641e902081a087080c0ab47bb7640f1c851fac25967a2313587e25ead69b796b93889270684932a9647bd83eb1fdb3738392ce67908ae37eaf3517e6861f939c6def227076b0a82fff0ddbcff43beea186d6b157366b18440ef85823af367041150d3e052a4b4b18562eecb000f7b964edc1f6a4a8313242409d1ba59216c333c27198766003a1134f39dd96328dca27af906142883eac55a70cca00e03ad43e0473f3546825f697c9bf25f839712703d38d2dbc5cf8c8635", 0xbc, 0x2}, {&(0x7f0000000600)="703407f4d6e58299db09ad4d5eef6f910b57ee87302d4416003349125e894cfb2e30b34f43aa9218e9f74edc9b11113ecd722e752548413c87c0bd9ec4d6bab0b390e23c781466ce5901a18421fef9a2e51034c1b47ce9bbbc72abd81f30f055ade705799793d4650a9dd165eebf8e5e43bf46aed188243393c730ff02ba63e2e2798ddecc9af65657b2e2c15ab0de811162724c99c96919", 0x98, 0x2}]}, 0x2, 0x1}, 0x1) setresuid(0x0, 0xee00, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 451.342084ms ago: executing program 5 (id=2654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZzW3r7MZX5/ZJLZ+bc4TzT26fn3NNz5gZQWYPpP7WI/RExnUT0J/OLZZ2RFQ4uPO/Bnx+dTR9J1Ouv/Z5Ekh3Ln59kX/uyk3si4scfktjXsbLemblrF8enpiavZvvDs5emh2fmrh2+cGn8/OT5ycujL4yeOH7s+ImRI21d1/WCY6dvvvt+/ydjb37z1V/JyLe/jCVxMl7Onrj0OjbLYAw2vifJyqK+E5tdWUk6sp+TpS9x0lliQKxL/vp1RcQT0R8d8fDF64+PXyk1OGBL1ZOIOlBRifyHisr7Afl7++Xvg2ul9EqA7XD/1MIAwMr871wYG4yextjA7gdJLB3WSSKivZG5Znsi4u6dsZvn7ozdjC0ahwOKzd+IiCeL8j9p5P9A9MRAI/9rTfmf9gvOZF/T46+2Wf/yoWL5D9tnIf97Vs3/aJH/by3J/7fbrH/w4eY7vU3539vuJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMlNqH9w2f7Kv//X7m1CNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+EavG4i4fyPiqcL5v8li+58UtP/p74PpR6xj37O3zrQqWzv/ga1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63qbzf/3WICNi5t/3evnv8DydL79cysv46jc531VmXt9v+7k9cbt5zpzo59MD47e3Ukojs53ZEebTo+uv6Y4XGU50OeL2n+H3pm9fG/ov5/b0TML/u/kz+a1xTn/v9336+t4tH/h/Kk+T+xrvZ//Rujtwa+b1X/o7X/xxpt/aHsiPE/WPBFnqbdzccL0rGzqGi74wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRljU+/7+Wf9Jv/8J+kn/+/8CS/dFl+0cjYm9EfN7R29gfOntlaqLsiwcAAAAAAAAAAAAAAAAAAIAdoq/F+v/Ubx1lRwdsuc6yAwBKU5D/P5URB7D9tP9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VNc68z/JHgAAAAAAwM6098Dtn5OImH+xt/FIdWdlXaVGBmy1WtkBAKVxix+oLlP/oLrW+x7/5BbFAZRnrfm8PS1P2shM4OmzGzgZAAAAAAAAAAAAACrn4H7r/6GqrP+H6rL+H6orX/9/oOQ4gO3nPT4Qa6zkL1z/v+ZZAAAAAAAAAAAAAMBmmpm7dnF8amryqo03dkYY27lRr9evpz8FOyWef/lGPhV+p8SzbCNf6/doZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//030lBw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write$binfmt_aout(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 199.286287ms ago: executing program 0 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 118.211678ms ago: executing program 0 (id=2657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 117.486469ms ago: executing program 3 (id=2658): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 31.274ms ago: executing program 0 (id=2659): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x7, @loopback, 0xec7}], 0x38) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 0s ago: executing program 4 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0xab7, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x3, 0x3}, 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 56][ T29] audit: type=1326 audit(1749663035.410:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.3.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 181.944013][ T29] audit: type=1326 audit(1749663035.410:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.3.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 181.944138][ T29] audit: type=1326 audit(1749663035.410:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.3.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 181.944178][ T29] audit: type=1326 audit(1749663035.420:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.3.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 181.999428][ T9416] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.115954][ T9416] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.127945][ T9423] lo speed is unknown, defaulting to 1000 [ 182.302164][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.413009][ T9434] loop2: detected capacity change from 0 to 512 [ 182.440194][ T9434] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 182.543833][ T9443] openvswitch: netlink: Message has 6 unknown bytes. [ 182.645490][ T9448] loop2: detected capacity change from 0 to 1024 [ 182.661029][ T9448] EXT4-fs: Ignoring removed bh option [ 182.666762][ T9448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.710583][ T9448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.342912][ T9462] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 183.355071][ T9462] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 183.592970][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.694537][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 183.863622][ T9483] lo speed is unknown, defaulting to 1000 [ 183.904316][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1890'. [ 183.917926][ T9490] netem: change failed [ 183.923962][ T9483] lo speed is unknown, defaulting to 1000 [ 183.991958][ T9492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1893'. [ 184.001623][ T9492] hsr_slave_1: left promiscuous mode [ 184.330188][ T9515] batman_adv: batadv0: Adding interface: dummy0 [ 184.336550][ T9515] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.364615][ T9515] batman_adv: batadv0: Interface activated: dummy0 [ 184.375662][ T9515] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1900'. [ 184.385508][ T9515] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 184.395167][ T9515] 0ªî{X¹¦: entered allmulticast mode [ 184.402798][ T9515] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 184.684319][ T9530] netlink: 'syz.5.1904': attribute type 4 has an invalid length. [ 184.699076][ T9530] netlink: 'syz.5.1904': attribute type 4 has an invalid length. [ 184.738769][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 184.752982][ T9534] ipvlan0: entered promiscuous mode [ 184.822925][ T9539] batman_adv: batadv0: Interface deactivated: dummy0 [ 184.829772][ T9539] batman_adv: batadv0: Removing interface: dummy0 [ 184.906549][ T6408] Process accounting resumed [ 184.943082][ T9547] bridge3: port 1(ip6gretap0) entered blocking state [ 184.949987][ T9547] bridge3: port 1(ip6gretap0) entered disabled state [ 184.956916][ T9547] ip6gretap0: entered allmulticast mode [ 184.963939][ T9547] ip6gretap0: entered promiscuous mode [ 184.983404][ T9547] veth7: entered promiscuous mode [ 184.988726][ T9547] bridge3: port 2(veth7) entered blocking state [ 184.995311][ T9547] bridge3: port 2(veth7) entered disabled state [ 185.002347][ T9547] veth7: entered allmulticast mode [ 185.498402][ T9569] lo speed is unknown, defaulting to 1000 [ 185.506493][ T9569] lo speed is unknown, defaulting to 1000 [ 186.141260][ T9590] __nla_validate_parse: 1 callbacks suppressed [ 186.141276][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1925'. [ 186.272138][ T9589] team0: Mode changed to "loadbalance" [ 186.540117][ T9595] loop0: detected capacity change from 0 to 512 [ 186.571154][ T9595] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 187.433722][ T9600] lo speed is unknown, defaulting to 1000 [ 187.440608][ T9600] lo speed is unknown, defaulting to 1000 [ 187.870141][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 187.970608][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 187.980265][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 188.039927][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 188.082648][ T9608] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.216669][ T9608] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.313612][ T9608] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.443949][ T9608] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.502845][ T9611] sch_fq: defrate 0 ignored. [ 188.548282][ T9608] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.591610][ T9608] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.643234][ T9608] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.685692][ T9608] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.814854][ T9617] loop5: detected capacity change from 0 to 1024 [ 188.844332][ T9617] EXT4-fs: Ignoring removed bh option [ 188.864998][ T9617] EXT4-fs: inline encryption not supported [ 188.883638][ T9622] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1935'. [ 188.901392][ T9622] 0ªî{X¹¦: renamed from gretap0 [ 188.911531][ T9617] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.932273][ T9622] 0ªî{X¹¦: entered allmulticast mode [ 188.941994][ T9622] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 188.970625][ T9617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 188.988767][ T9617] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1945: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.028343][ T9617] __quota_error: 112 callbacks suppressed [ 189.028362][ T9617] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 189.053475][ T9617] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.1945: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.123256][ T9617] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 189.133261][ T9617] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1945: Failed to acquire dquot type 0 [ 189.175625][ T9617] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 189.200187][ T9617] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1945: mark_inode_dirty error [ 189.233269][ T9617] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 189.270996][ T9617] EXT4-fs (loop5): 1 orphan inode deleted [ 189.291757][ T9617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.321294][ T9217] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.414278][ T9217] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 189.423839][ T9217] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 189.510862][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.523249][ T5988] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.549990][ T29] audit: type=1400 audit(1749663043.090:6824): avc: denied { name_bind } for pid=9637 comm="syz.0.1941" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 189.589914][ T5988] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 189.620159][ T5988] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 189.753568][ T9652] loop0: detected capacity change from 0 to 2048 [ 189.812776][ T9652] loop0: p1 < > p4 [ 189.817563][ T9652] loop0: p4 size 8388608 extends beyond EOD, truncated [ 189.854851][ T9652] SELinux: ebitmap: truncated map [ 189.914273][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 189.954489][ T9652] SELinux: failed to load policy [ 190.015589][ T9669] syz.0.1954: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 190.032466][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.0.1954 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 190.032534][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.032547][ T9669] Call Trace: [ 190.032553][ T9669] [ 190.032559][ T9669] __dump_stack+0x1d/0x30 [ 190.032581][ T9669] dump_stack_lvl+0xe8/0x140 [ 190.032599][ T9669] dump_stack+0x15/0x1b [ 190.032614][ T9669] warn_alloc+0x12b/0x1a0 [ 190.032671][ T9669] __vmalloc_node_range_noprof+0x9c/0xe00 [ 190.032706][ T9669] ? __futex_wait+0x1ff/0x260 [ 190.032742][ T9669] ? __pfx_futex_wake_mark+0x10/0x10 [ 190.032824][ T9669] ? __rcu_read_unlock+0x4f/0x70 [ 190.032920][ T9669] ? avc_has_perm_noaudit+0x1b1/0x200 [ 190.032956][ T9669] ? should_fail_ex+0x30/0x280 [ 190.033063][ T9669] ? xskq_create+0x36/0xe0 [ 190.033088][ T9669] vmalloc_user_noprof+0x7d/0xb0 [ 190.033119][ T9669] ? xskq_create+0x80/0xe0 [ 190.033214][ T9669] xskq_create+0x80/0xe0 [ 190.033237][ T9669] xsk_init_queue+0x95/0xf0 [ 190.033332][ T9669] xsk_setsockopt+0x35c/0x510 [ 190.033354][ T9669] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.033381][ T9669] __sys_setsockopt+0x184/0x200 [ 190.033406][ T9669] __x64_sys_setsockopt+0x64/0x80 [ 190.033430][ T9669] x64_sys_call+0x2bd5/0x2fb0 [ 190.033466][ T9669] do_syscall_64+0xd2/0x200 [ 190.033486][ T9669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.033606][ T9669] ? clear_bhb_loop+0x40/0x90 [ 190.033637][ T9669] ? clear_bhb_loop+0x40/0x90 [ 190.033726][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.033745][ T9669] RIP: 0033:0x7f95db23e929 [ 190.033761][ T9669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.033819][ T9669] RSP: 002b:00007f95d98a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.033841][ T9669] RAX: ffffffffffffffda RBX: 00007f95db465fa0 RCX: 00007f95db23e929 [ 190.033856][ T9669] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 190.033870][ T9669] RBP: 00007f95db2c0b39 R08: 0000000000000004 R09: 0000000000000000 [ 190.033882][ T9669] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.033894][ T9669] R13: 0000000000000000 R14: 00007f95db465fa0 R15: 00007fff44153e88 [ 190.033988][ T9669] [ 190.033995][ T9669] Mem-Info: [ 190.282797][ T9669] active_anon:25924 inactive_anon:3 isolated_anon:0 [ 190.282797][ T9669] active_file:21314 inactive_file:2328 isolated_file:0 [ 190.282797][ T9669] unevictable:16855 dirty:253 writeback:0 [ 190.282797][ T9669] slab_reclaimable:3257 slab_unreclaimable:28413 [ 190.282797][ T9669] mapped:31676 shmem:20015 pagetables:1194 [ 190.282797][ T9669] sec_pagetables:0 bounce:0 [ 190.282797][ T9669] kernel_misc_reclaimable:0 [ 190.282797][ T9669] free:1568554 free_pcp:10497 free_cma:0 [ 190.337598][ T9669] Node 0 active_anon:103696kB inactive_anon:12kB active_file:85256kB inactive_file:9312kB unevictable:67420kB isolated(anon):0kB isolated(file):0kB mapped:126704kB dirty:1012kB writeback:0kB shmem:80060kB writeback_tmp:0kB kernel_stack:4912kB pagetables:4776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.369991][ T9669] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.401603][ T9669] lowmem_reserve[]: 0 2882 7861 7861 [ 190.407669][ T9669] Node 0 DMA32 free:2947840kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951468kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 190.441382][ T9669] lowmem_reserve[]: 0 0 4978 4978 [ 190.446492][ T9669] Node 0 Normal free:3310552kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103696kB inactive_anon:12kB active_file:85256kB inactive_file:9312kB unevictable:67420kB writepending:1012kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:38316kB local_pcp:37276kB free_cma:0kB [ 190.483385][ T9669] lowmem_reserve[]: 0 0 0 0 [ 190.487933][ T9669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.501368][ T9669] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947840kB [ 190.520130][ T9669] Node 0 Normal: 10*4kB (UE) 2*8kB (ME) 11*16kB (UME) 124*32kB (UME) 583*64kB (UME) 409*128kB (UME) 304*256kB (UM) 268*512kB (UME) 187*1024kB (UM) 40*2048kB (UME) 666*4096kB (UM) = 3310248kB [ 190.540562][ T9669] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 190.551345][ T9669] 60519 total pagecache pages [ 190.556046][ T9669] 10 pages in swap cache [ 190.562411][ T9669] Free swap = 123468kB [ 190.566570][ T9669] Total swap = 124996kB [ 190.571551][ T9669] 2097051 pages RAM [ 190.575453][ T9669] 0 pages HighMem/MovableOnly [ 190.581634][ T9669] 80786 pages reserved [ 190.742746][ T9676] netlink: 'syz.4.1955': attribute type 4 has an invalid length. [ 190.773770][ T9676] netlink: 'syz.4.1955': attribute type 4 has an invalid length. [ 190.862913][ T29] audit: type=1400 audit(1749663044.390:6825): avc: denied { map } for pid=9679 comm="syz.0.1967" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.929829][ T29] audit: type=1400 audit(1749663044.400:6826): avc: denied { audit_write } for pid=9681 comm="syz.4.1957" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 190.954650][ T29] audit: type=1107 audit(1749663044.400:6827): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 190.968109][ T29] audit: type=1326 audit(1749663044.460:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 190.994862][ T29] audit: type=1326 audit(1749663044.460:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 191.022615][ T29] audit: type=1326 audit(1749663044.460:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 191.111892][ T9694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1961'. [ 191.398491][ T9705] loop0: detected capacity change from 0 to 1024 [ 191.412940][ T9707] tipc: New replicast peer: 255.255.255.255 [ 191.419178][ T9707] tipc: Enabled bearer , priority 10 [ 191.443737][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.533885][ T9714] loop2: detected capacity change from 0 to 512 [ 191.542598][ T9270] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 191.568446][ T9714] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.580507][ T9270] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 191.593067][ T9270] EXT4-fs (loop0): This should not happen!! Data will be lost [ 191.593067][ T9270] [ 191.602757][ T9270] EXT4-fs (loop0): Total free blocks count 0 [ 191.608739][ T9270] EXT4-fs (loop0): Free/Dirty block details [ 191.615348][ T9270] EXT4-fs (loop0): free_blocks=68451041280 [ 191.621191][ T9270] EXT4-fs (loop0): dirty_blocks=64 [ 191.626308][ T9270] EXT4-fs (loop0): Block reservation details [ 191.632560][ T9270] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 191.643383][ T9714] EXT4-fs (loop2): 1 truncate cleaned up [ 191.652115][ T9714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.690167][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.508243][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.539162][ T6408] tipc: Node number set to 1 [ 192.563889][ T9747] lo speed is unknown, defaulting to 1000 [ 192.570437][ T9747] lo speed is unknown, defaulting to 1000 [ 192.672049][ T9759] tipc: Bearer : already 2 bearers with priority 10 [ 192.681624][ T9759] tipc: Bearer : trying with adjusted priority [ 192.696908][ T9759] tipc: New replicast peer: 255.255.255.255 [ 192.704901][ T9759] tipc: Enabled bearer , priority 9 [ 192.855401][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 193.138027][ T9773] loop0: detected capacity change from 0 to 1024 [ 193.165828][ T9782] loop5: detected capacity change from 0 to 512 [ 193.174164][ T9782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.193405][ T9773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.233089][ T9782] EXT4-fs (loop5): 1 truncate cleaned up [ 193.240195][ T9782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.447113][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.887042][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.974453][ T9812] loop5: detected capacity change from 0 to 512 [ 193.991579][ T9812] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 194.002320][ T9812] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1998: bad orphan inode 15 [ 194.026112][ T9812] ext4_test_bit(bit=14, block=18) = 1 [ 194.031860][ T9812] is_bad_inode(inode)=0 [ 194.036178][ T9812] NEXT_ORPHAN(inode)=1023 [ 194.041386][ T9812] max_ino=32 [ 194.044666][ T9812] i_nlink=0 [ 194.048033][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 194.048099][ T29] audit: type=1326 audit(1749663047.570:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.060701][ T9812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 194.079266][ T29] audit: type=1326 audit(1749663047.580:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.079419][ T29] audit: type=1326 audit(1749663047.580:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.079525][ T29] audit: type=1326 audit(1749663047.580:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.079689][ T29] audit: type=1326 audit(1749663047.580:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.079778][ T29] audit: type=1326 audit(1749663047.580:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.211756][ T29] audit: type=1326 audit(1749663047.580:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.234325][ T9812] ext2 filesystem being mounted at /237/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 194.235407][ T29] audit: type=1326 audit(1749663047.580:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.270382][ T29] audit: type=1326 audit(1749663047.580:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.293845][ T29] audit: type=1326 audit(1749663047.580:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.4.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 194.352886][ T9824] 9pnet_fd: Insufficient options for proto=fd [ 194.410424][ T9828] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 194.441097][ T9828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.465136][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 194.484666][ T9828] bond5 (unregistering): Released all slaves [ 195.024978][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 195.035251][ T9842] netlink: 'syz.2.2010': attribute type 4 has an invalid length. [ 195.103247][ T6408] lo speed is unknown, defaulting to 1000 [ 195.109168][ T6408] syz2: Port: 1 Link DOWN [ 195.134946][ T9839] lo speed is unknown, defaulting to 1000 [ 195.141402][ T9839] lo speed is unknown, defaulting to 1000 [ 195.209763][ T9842] netlink: 'syz.2.2010': attribute type 4 has an invalid length. [ 195.243078][ T6415] lo speed is unknown, defaulting to 1000 [ 195.248854][ T6415] syz2: Port: 1 Link ACTIVE [ 195.698176][ T9851] lo speed is unknown, defaulting to 1000 [ 195.742837][ T9851] lo speed is unknown, defaulting to 1000 [ 195.932336][ T9863] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.996002][ T9863] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.017061][ T9869] loop2: detected capacity change from 0 to 1024 [ 196.057135][ T9869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.084919][ T9863] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.121026][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.243652][ T9863] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.260062][ T9871] infiniband syz1: set down [ 196.264896][ T9871] infiniband syz1: added veth0_to_team [ 196.291474][ T9871] RDS/IB: syz1: added [ 196.304524][ T9871] smc: adding ib device syz1 with port count 1 [ 196.333739][ T9871] smc: ib device syz1 port 1 has pnetid [ 196.367116][ T9863] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.382989][ T9863] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.450671][ T9863] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.483321][ T9883] netlink: 'syz.2.2024': attribute type 4 has an invalid length. [ 196.487089][ T9863] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.511567][ T6399] lo speed is unknown, defaulting to 1000 [ 196.517602][ T6399] syz2: Port: 1 Link DOWN [ 196.523445][ T9883] netlink: 'syz.2.2024': attribute type 4 has an invalid length. [ 196.551195][ T6399] lo speed is unknown, defaulting to 1000 [ 196.558875][ T6399] syz2: Port: 1 Link ACTIVE [ 196.827745][ T9892] loop2: detected capacity change from 0 to 164 [ 196.841513][ T9892] isofs_fill_super: root inode is not a directory. Corrupted media? [ 196.873251][ T9892] lo speed is unknown, defaulting to 1000 [ 196.881507][ T9892] lo speed is unknown, defaulting to 1000 [ 197.165571][ T9895] wg2: entered promiscuous mode [ 197.171499][ T9895] wg2: entered allmulticast mode [ 197.698964][ T9903] syzkaller0: entered promiscuous mode [ 197.704607][ T9903] syzkaller0: entered allmulticast mode [ 197.748412][ T9912] xt_hashlimit: size too large, truncated to 1048576 [ 198.159268][ T9915] lo speed is unknown, defaulting to 1000 [ 198.223229][ T9915] lo speed is unknown, defaulting to 1000 [ 198.551939][ T9924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'. [ 198.921575][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2046'. [ 199.050602][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 199.050617][ T29] audit: type=1326 audit(1749663052.590:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.0.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 199.119144][ T29] audit: type=1326 audit(1749663052.620:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.0.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 199.192483][ T29] audit: type=1326 audit(1749663052.730:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.0.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 199.216670][ T29] audit: type=1326 audit(1749663052.730:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.0.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 199.242354][ T29] audit: type=1326 audit(1749663052.730:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.0.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 199.438295][ T9951] pim6reg1: entered promiscuous mode [ 199.459678][ T29] audit: type=1326 audit(1749663052.970:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 199.459739][ T29] audit: type=1326 audit(1749663052.970:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 199.459828][ T29] audit: type=1326 audit(1749663052.970:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 199.459932][ T29] audit: type=1326 audit(1749663052.970:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 199.460032][ T29] audit: type=1326 audit(1749663052.970:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 199.694434][ T9951] pim6reg1: entered allmulticast mode [ 199.773101][ T9958] tls_set_device_offload: netdev not found [ 199.853159][ T9960] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 199.948799][ T9974] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 200.260708][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2064'. [ 200.372912][ T9984] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.405022][ T9991] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 200.454262][ T9984] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.468443][ T9995] loop0: detected capacity change from 0 to 512 [ 200.475577][ T9997] xt_hashlimit: size too large, truncated to 1048576 [ 200.540244][ T9995] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 200.550328][ T9995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 200.566247][ T9995] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2069: Failed to acquire dquot type 1 [ 200.578788][ T9984] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.581412][ T9995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2069: bg 0: block 40: padding at end of block bitmap is not set [ 200.605375][ T9995] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 200.621982][ T9995] EXT4-fs (loop0): 1 truncate cleaned up [ 200.629000][ T9995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.664366][ T9984] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.694362][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.761314][ T9984] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.774924][ T9984] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.803824][ T9984] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.816286][ T9984] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.944229][T10018] loop0: detected capacity change from 0 to 164 [ 200.953380][T10018] isofs_fill_super: root inode is not a directory. Corrupted media? [ 200.985372][T10018] lo speed is unknown, defaulting to 1000 [ 200.991961][T10018] lo speed is unknown, defaulting to 1000 [ 201.281451][T10025] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 201.321213][T10025] $Hÿ: left promiscuous mode [ 201.326055][T10025] bond_slave_0: left promiscuous mode [ 201.333058][T10025] bond_slave_1: left promiscuous mode [ 201.378771][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 201.393487][T10025] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 201.428172][T10025] team0: Port device $Hÿ added [ 201.447584][T10029] team0 (unregistering): Port device team_slave_0 removed [ 201.463259][T10029] team0 (unregistering): Port device team_slave_1 removed [ 201.472653][T10029] team0 (unregistering): Port device geneve1 removed [ 201.485133][T10029] team0 (unregistering): Port device $Hÿ removed [ 201.517699][T10031] loop5: detected capacity change from 0 to 512 [ 201.530514][T10031] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 201.539082][T10031] EXT4-fs (loop5): orphan cleanup on readonly fs [ 201.657387][T10031] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 201.679367][T10031] EXT4-fs (loop5): Remounting filesystem read-only [ 201.686242][T10031] EXT4-fs (loop5): 1 truncate cleaned up [ 201.693032][ T9229] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 201.704984][ T9229] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 201.716806][ T9229] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 201.746566][T10031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.783106][T10031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.793572][T10043] loop5: detected capacity change from 0 to 512 [ 202.802769][T10043] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.812346][T10043] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.829760][T10043] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2084: Failed to acquire dquot type 1 [ 202.861230][T10043] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2084: bg 0: block 40: padding at end of block bitmap is not set [ 202.891151][T10043] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 202.949334][T10043] EXT4-fs (loop5): 1 truncate cleaned up [ 202.969810][T10043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.075284][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.218229][T10053] loop5: detected capacity change from 0 to 2048 [ 203.261665][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2087'. [ 203.367726][T10059] sch_fq: defrate 4294967295 ignored. [ 204.174053][T10066] loop0: detected capacity change from 0 to 512 [ 204.186080][T10066] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 204.207971][T10066] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.2091: bad orphan inode 15 [ 204.224509][T10066] ext4_test_bit(bit=14, block=18) = 1 [ 204.231345][T10066] is_bad_inode(inode)=0 [ 204.235723][T10066] NEXT_ORPHAN(inode)=1023 [ 204.240801][T10066] max_ino=32 [ 204.244162][T10066] i_nlink=0 [ 204.248428][T10066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 204.263704][T10066] ext2 filesystem being mounted at /421/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 204.283177][T10072] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 204.325355][T10072] bond4: entered promiscuous mode [ 204.330582][T10072] bond4: entered allmulticast mode [ 204.348767][T10072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.571174][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 205.589161][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 205.589179][ T29] audit: type=1400 audit(1749663059.120:7758): avc: denied { ioctl } for pid=10092 comm="syz.2.2101" path="socket:[30495]" dev="sockfs" ino=30495 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.632310][T10096] loop2: detected capacity change from 0 to 1024 [ 205.650521][T10096] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.671685][T10096] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.683553][T10096] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.785318][T10096] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 205.812616][T10096] EXT4-fs (loop2): mount failed [ 206.163233][ T29] audit: type=1326 audit(1749663059.700:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.308127][ T29] audit: type=1326 audit(1749663059.730:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.332517][ T29] audit: type=1326 audit(1749663059.730:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.358999][ T29] audit: type=1326 audit(1749663059.730:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.383574][ T29] audit: type=1326 audit(1749663059.730:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.411199][ T29] audit: type=1326 audit(1749663059.730:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.437099][ T29] audit: type=1326 audit(1749663059.730:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.462570][ T29] audit: type=1326 audit(1749663059.730:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 206.487026][ T29] audit: type=1326 audit(1749663059.730:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 207.401976][T10138] team0: Mode changed to "loadbalance" [ 207.447057][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'. [ 207.814881][T10141] veth0: entered promiscuous mode [ 207.836283][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 207.889281][T10141] veth0 (unregistering): left promiscuous mode [ 208.212788][T10148] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 208.304649][T10150] loop5: detected capacity change from 0 to 512 [ 208.322165][T10150] ext2: Unknown parameter 'fowner>00000000000000000000' [ 208.342582][T10150] netlink: 'syz.5.2121': attribute type 13 has an invalid length. [ 208.457512][T10150] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.467304][T10150] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.477679][T10150] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.487091][T10150] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.726616][T10163] loop5: detected capacity change from 0 to 1024 [ 208.789249][T10163] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.797840][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2123'. [ 208.802284][T10163] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.858509][T10163] JBD2: no valid journal superblock found [ 208.861023][T10155] vlan0: entered allmulticast mode [ 208.865665][T10163] EXT4-fs (loop5): Could not load journal inode [ 208.869528][T10155] bond5: entered allmulticast mode [ 209.138964][T10170] 9pnet_fd: Insufficient options for proto=fd [ 209.276273][T10176] netlink: 'syz.3.2131': attribute type 10 has an invalid length. [ 209.284307][T10176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2131'. [ 209.300830][T10176] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 209.380992][T10178] loop5: detected capacity change from 0 to 164 [ 209.436764][T10178] isofs_fill_super: root inode is not a directory. Corrupted media? [ 209.467079][T10178] lo speed is unknown, defaulting to 1000 [ 209.475584][T10178] lo speed is unknown, defaulting to 1000 [ 209.721402][T10182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.776213][T10184] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.903907][T10184] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.089889][T10184] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.260997][T10184] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.501316][T10184] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.562030][T10184] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.657380][T10184] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.752847][T10184] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.909064][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 210.909078][ T29] audit: type=1326 audit(1749663064.440:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 211.027790][ T29] audit: type=1326 audit(1749663064.500:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 211.592450][T10211] netlink: 'syz.3.2144': attribute type 13 has an invalid length. [ 211.632744][T10211] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.641994][T10211] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.650403][T10211] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.658803][T10211] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.750829][T10215] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.779362][ T29] audit: type=1326 audit(1749663065.310:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 211.804491][ T29] audit: type=1326 audit(1749663065.310:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 211.828242][ T29] audit: type=1326 audit(1749663065.310:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 211.959678][ T29] audit: type=1400 audit(1749663065.500:8253): avc: denied { bind } for pid=10220 comm="syz.5.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.097640][T10222] lo speed is unknown, defaulting to 1000 [ 212.114276][T10222] lo speed is unknown, defaulting to 1000 [ 212.591717][T10234] 9pnet_fd: Insufficient options for proto=fd [ 212.731231][T10236] : left allmulticast mode [ 212.736265][T10236] bond_slave_0: left allmulticast mode [ 212.742460][T10236] bond_slave_1: left allmulticast mode [ 212.747937][T10236] : left promiscuous mode [ 212.753854][T10236] bond_slave_0: left promiscuous mode [ 212.760292][T10236] bond_slave_1: left promiscuous mode [ 212.766008][T10236] bridge0: port 1() entered disabled state [ 212.806835][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 212.816518][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 212.836894][T10236] : (slave bond_slave_0): Releasing backup interface [ 212.856481][T10236] : (slave bond_slave_1): Releasing backup interface [ 212.880546][T10236] team0: Port device team_slave_0 removed [ 212.888134][T10236] team0: Port device 26±ÿ removed [ 212.896044][T10236] team0: Port device geneve1 removed [ 212.902440][T10236] bond2: (slave veth5): Releasing active interface [ 212.908984][T10236] bond2: (slave veth5): the permanent HWaddr of slave - 56:b4:56:85:f0:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 212.930351][T10236] bond2: (slave vlan2): Releasing active interface [ 212.936918][T10236] vlan2: left promiscuous mode [ 212.947434][T10236] ip6gretap0: left allmulticast mode [ 212.952788][T10236] ip6gretap0: left promiscuous mode [ 212.958240][T10236] bridge3: port 1(ip6gretap0) entered disabled state [ 212.968076][T10236] veth7: left allmulticast mode [ 212.974536][T10236] bridge3: port 2(veth7) entered disabled state [ 212.986599][T10238] team0: Mode changed to "loadbalance" [ 213.077650][ T29] audit: type=1400 audit(1749663066.610:8254): avc: denied { read } for pid=10250 comm="syz.4.2156" path="socket:[30698]" dev="sockfs" ino=30698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.087342][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'. [ 213.436304][T10266] loop5: detected capacity change from 0 to 256 [ 213.451149][T10266] FAT-fs (loop5): codepage cp857 not found [ 213.610412][T10270] loop5: detected capacity change from 0 to 128 [ 213.620627][T10270] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.633598][T10270] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.667116][T10274] openvswitch: netlink: Message has 6 unknown bytes. [ 213.699604][ T29] audit: type=1400 audit(1749663067.230:8255): avc: denied { setattr } for pid=10269 comm="syz.5.2162" path="/261/file0/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 213.822468][ T5988] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.863768][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 213.878656][T10277] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2164'. [ 213.890840][T10281] hsr_slave_1: left promiscuous mode [ 214.093080][ T29] audit: type=1400 audit(1749663067.630:8256): avc: denied { create } for pid=10292 comm="syz.3.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.123991][ T29] audit: type=1400 audit(1749663067.650:8257): avc: denied { ioctl } for pid=10292 comm="syz.3.2168" path="socket:[31781]" dev="sockfs" ino=31781 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.304005][T10299] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 214.313533][T10299] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 214.348325][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 214.390559][T10299] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.398946][T10299] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.408708][T10299] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.417460][T10299] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.448422][T10299] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 214.458458][T10299] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 214.541544][T10310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=10310 comm=syz.2.2173 [ 214.564599][T10310] loop2: detected capacity change from 0 to 1024 [ 214.573299][T10310] EXT4-fs: Ignoring removed nobh option [ 214.579063][T10310] EXT4-fs: Ignoring removed bh option [ 214.613368][T10310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.870918][T10330] loop0: detected capacity change from 0 to 512 [ 214.878607][T10330] ext2: Unknown parameter 'fowner>00000000000000000000' [ 214.892307][T10330] netlink: 'syz.0.2182': attribute type 13 has an invalid length. [ 214.980554][T10330] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.989992][T10330] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.998397][T10330] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.006784][T10330] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.021663][ T6399] lo speed is unknown, defaulting to 1000 [ 215.022932][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 215.027446][ T6399] syz0: Port: 1 Link DOWN [ 215.429009][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.040967][T10354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2190'. [ 216.060884][T10354] bridge_slave_0: entered allmulticast mode [ 216.067076][T10354] netlink: 'syz.4.2190': attribute type 3 has an invalid length. [ 216.078462][T10356] bridge_slave_0: left allmulticast mode [ 216.085611][T10356] bridge_slave_0: left promiscuous mode [ 216.091422][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.101582][T10358] random: crng reseeded on system resumption [ 216.108642][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 216.108656][ T29] audit: type=1400 audit(1749663069.640:8528): avc: denied { append } for pid=10351 comm="syz.5.2188" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.141426][ T29] audit: type=1400 audit(1749663069.640:8529): avc: denied { open } for pid=10351 comm="syz.5.2188" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.172429][ T29] audit: type=1326 audit(1749663069.710:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.5.2188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x0 [ 216.175696][ T6399] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 216.216833][T10356] bridge_slave_1: left allmulticast mode [ 216.222798][T10356] bridge_slave_1: left promiscuous mode [ 216.228601][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.245463][T10356] vlan3: left promiscuous mode [ 216.251492][T10356] bond0: left promiscuous mode [ 216.264904][T10356] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 216.283612][T10356] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 216.316430][T10356] bond2: (slave veth5): Releasing active interface [ 216.324411][T10356] bond2: (slave veth5): the permanent HWaddr of slave - c6:1e:5c:e5:31:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 216.346493][T10356] bond2: (slave vlan2): Releasing active interface [ 216.385473][ T29] audit: type=1400 audit(1749663069.900:8531): avc: denied { setopt } for pid=10366 comm="syz.5.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.420383][T10356] vlan2: left promiscuous mode [ 216.427647][T10356] vlan3: left allmulticast mode [ 216.433083][T10356] bridge0: port 3(vlan3) entered disabled state [ 216.467768][T10361] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.478306][T10361] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.487294][T10361] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.495585][T10361] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.573362][T10361] : (slave vxlan0): Enslaving as an active interface with an up link [ 217.108424][T10376] loop5: detected capacity change from 0 to 512 [ 217.124693][T10376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.138376][ T29] audit: type=1326 audit(1749663070.680:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.139776][T10376] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.162748][ T29] audit: type=1326 audit(1749663070.680:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.195647][ T29] audit: type=1326 audit(1749663070.710:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.222334][ T29] audit: type=1326 audit(1749663070.710:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.246571][ T29] audit: type=1326 audit(1749663070.710:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.271060][ T29] audit: type=1326 audit(1749663070.710:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 217.352838][T10393] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 217.483410][T10397] vlan0: entered allmulticast mode [ 217.488594][T10397] bridge_slave_0: entered allmulticast mode [ 217.810859][T10408] __nla_validate_parse: 3 callbacks suppressed [ 217.810874][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 217.825998][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 218.083237][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.133468][T10424] loop0: detected capacity change from 0 to 256 [ 218.689810][T10434] lo speed is unknown, defaulting to 1000 [ 218.697658][T10434] lo speed is unknown, defaulting to 1000 [ 219.101752][T10438] netlink: 'syz.3.2218': attribute type 10 has an invalid length. [ 219.284824][T10441] loop0: detected capacity change from 0 to 512 [ 219.328399][T10441] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 219.347406][T10446] lo: entered promiscuous mode [ 219.363255][T10441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.372510][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.398136][T10441] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 219.408631][T10441] EXT4-fs (loop0): 1 orphan inode deleted [ 219.416215][T10441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 219.466365][T10441] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 219.476385][T10441] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 219.487547][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.501947][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.515468][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.546334][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.593585][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.643616][T10441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2219: Block bitmap for bg 0 marked uninitialized [ 219.748034][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.853607][T10466] netlink: 'syz.2.2228': attribute type 10 has an invalid length. [ 219.886581][T10469] loop0: detected capacity change from 0 to 512 [ 219.896893][T10466] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 219.910943][T10469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.926896][T10466] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2228'. [ 219.980960][T10466]  (unregistering): (slave vxlan0): Releasing backup interface [ 220.059203][T10466] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.067680][T10466] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.077533][T10466] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.087589][T10466] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.140349][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.171559][T10466]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 220.186392][T10466]  (unregistering): Released all slaves [ 220.388583][T10487] pim6reg1: entered promiscuous mode [ 220.395251][T10487] pim6reg1: entered allmulticast mode [ 220.406638][T10478] Set syz1 is full, maxelem 65536 reached [ 220.461824][T10489] loop5: detected capacity change from 0 to 512 [ 220.472048][T10489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.498060][T10489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.512928][T10489] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.570932][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2238'. [ 220.874367][T10501] bridge: RTM_NEWNEIGH with invalid ether address [ 221.087228][T10507] tmpfs: Bad value for 'size' [ 221.110532][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 221.110548][ T29] audit: type=1326 audit(1749663074.650:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.218349][ T29] audit: type=1326 audit(1749663074.680:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.254676][T10513] loop2: detected capacity change from 0 to 512 [ 221.264194][T10513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.341794][T10513] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.349389][T10513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2245: bg 0: block 248: padding at end of block bitmap is not set [ 221.364990][T10513] Quota error (device loop2): write_blk: dquota write failed [ 221.374030][T10513] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 221.384847][T10513] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2245: Failed to acquire dquot type 1 [ 221.398548][T10513] EXT4-fs (loop2): 1 truncate cleaned up [ 221.406997][T10513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.628143][T10518] wg2: left promiscuous mode [ 221.668670][T10518] wg2: left allmulticast mode [ 221.707050][T10519] wg2: entered promiscuous mode [ 221.713633][T10519] wg2: entered allmulticast mode [ 221.794353][ T29] audit: type=1326 audit(1749663075.330:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.820166][ T29] audit: type=1326 audit(1749663075.330:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.845729][ T29] audit: type=1326 audit(1749663075.330:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.871496][ T29] audit: type=1326 audit(1749663075.330:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.896386][ T29] audit: type=1326 audit(1749663075.330:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 221.922134][ T29] audit: type=1326 audit(1749663075.330:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 222.060517][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.488431][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.509372][T10534] loop2: detected capacity change from 0 to 128 [ 222.609670][T10542] netlink: 'syz.0.2254': attribute type 4 has an invalid length. [ 222.632390][T10542] netlink: 'syz.0.2254': attribute type 4 has an invalid length. [ 222.662074][ T6408] lo speed is unknown, defaulting to 1000 [ 222.668500][ T6408] syz0: Port: 1 Link ACTIVE [ 222.681202][T10534] bio_check_eod: 25380 callbacks suppressed [ 222.681220][T10534] syz.2.2249: attempt to access beyond end of device [ 222.681220][T10534] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 222.760290][T10534] syz.2.2249: attempt to access beyond end of device [ 222.760290][T10534] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 222.894642][T10560] loop5: detected capacity change from 0 to 256 [ 222.904031][T10564] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 223.046278][T10564] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 223.064167][T10568] syzkaller1: entered promiscuous mode [ 223.071242][T10568] syzkaller1: entered allmulticast mode [ 223.087607][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 223.189950][ T6399] lo speed is unknown, defaulting to 1000 [ 223.195726][ T6399] syz0: Port: 1 Link DOWN [ 223.203848][T10580] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 223.431452][T10590] loop5: detected capacity change from 0 to 1024 [ 223.444341][T10590] EXT4-fs: Ignoring removed bh option [ 223.451021][T10590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.478548][T10590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.842352][T10600] lo speed is unknown, defaulting to 1000 [ 223.851581][T10600] lo speed is unknown, defaulting to 1000 [ 223.901962][T10603] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2272'. [ 223.912490][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2272'. [ 224.289562][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.712874][T10616] lo speed is unknown, defaulting to 1000 [ 224.720237][T10616] lo speed is unknown, defaulting to 1000 [ 227.114930][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2280'. [ 227.151886][T10630] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.160569][T10630] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.170321][T10630] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.178642][T10630] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.270032][T10630] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.279172][T10630] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.287668][T10630] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.296396][T10630] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.457703][T10633] tipc: Enabled bearer , priority 0 [ 227.600525][T10632] tipc: Resetting bearer [ 227.705991][T10637] loop5: detected capacity change from 0 to 128 [ 227.721048][T10632] tipc: Disabling bearer [ 227.822925][T10637] syz.5.2284: attempt to access beyond end of device [ 227.822925][T10637] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 228.086830][T10650] loop2: detected capacity change from 0 to 1024 [ 228.128762][T10650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.260594][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.308797][T10660] tipc: Enabled bearer , priority 0 [ 228.369332][T10658] tipc: Resetting bearer [ 228.449193][T10658] tipc: Disabling bearer [ 229.076868][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 229.076886][ T29] audit: type=1326 audit(1749663082.580:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.107971][ T29] audit: type=1326 audit(1749663082.580:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.132945][ T29] audit: type=1326 audit(1749663082.580:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.158201][ T29] audit: type=1326 audit(1749663082.580:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.183572][ T29] audit: type=1326 audit(1749663082.580:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.213291][ T29] audit: type=1326 audit(1749663082.580:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.243700][ T29] audit: type=1326 audit(1749663082.590:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.271443][ T29] audit: type=1326 audit(1749663082.590:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.303345][ T29] audit: type=1326 audit(1749663082.590:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.332049][ T29] audit: type=1326 audit(1749663082.590:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 229.473881][T10680] loop2: detected capacity change from 0 to 128 [ 229.490781][T10680] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.504275][T10680] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.518548][T10682] netlink: 'syz.4.2298': attribute type 10 has an invalid length. [ 229.548959][T10688] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 229.561242][T10680] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.586959][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.611773][T10692] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2301'. [ 229.618904][T10688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.661058][T10688] bond6: (slave gretap0): making interface the new active one [ 229.670191][T10688] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 229.844470][T10696] tipc: Enabling of bearer rejected, already enabled [ 229.960930][T10698] netlink: 'syz.4.2304': attribute type 10 has an invalid length. [ 229.974448][T10700] loop2: detected capacity change from 0 to 512 [ 230.036137][T10700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.167353][T10700] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.187904][T10722] tipc: New replicast peer: 10.1.1.2 [ 231.194766][T10722] tipc: Enabled bearer , priority 10 [ 231.408776][T10730] lo speed is unknown, defaulting to 1000 [ 231.478730][T10730] lo speed is unknown, defaulting to 1000 [ 231.570446][T10739] loop5: detected capacity change from 0 to 128 [ 231.620738][T10739] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.695834][T10739] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.779497][T10739] netlink: 'syz.5.2319': attribute type 30 has an invalid length. [ 231.927434][ T5988] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.077298][T10752] bridge: RTM_NEWNEIGH with invalid ether address [ 232.132698][T10754] loop5: detected capacity change from 0 to 128 [ 232.447872][T10763] xt_cgroup: invalid path, errno=-2 [ 232.955007][T10761] lo speed is unknown, defaulting to 1000 [ 232.970534][T10761] lo speed is unknown, defaulting to 1000 [ 233.219456][T10703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 233.836974][T10805] IPVS: Error connecting to the multicast addr [ 234.911351][T10852] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 234.940855][T10777] Set syz1 is full, maxelem 65536 reached [ 234.986383][T10862] lo speed is unknown, defaulting to 1000 [ 234.994912][T10862] lo speed is unknown, defaulting to 1000 [ 235.337440][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 235.337456][ T29] audit: type=1400 audit(1749663088.870:10084): avc: denied { mount } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 236.894379][ T29] audit: type=1400 audit(1749663088.910:10085): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.919137][ T29] audit: type=1400 audit(1749663088.930:10086): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.943297][ T29] audit: type=1400 audit(1749663088.930:10087): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.965980][ T29] audit: type=1400 audit(1749663088.930:10088): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.990354][ T29] audit: type=1400 audit(1749663088.930:10089): avc: denied { add_name } for pid=10866 comm="syz.4.2341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 237.013345][ T29] audit: type=1400 audit(1749663088.930:10090): avc: denied { create } for pid=10866 comm="syz.4.2341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 237.034995][ T29] audit: type=1400 audit(1749663088.930:10091): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 237.058822][ T29] audit: type=1400 audit(1749663088.930:10092): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 237.083373][ T29] audit: type=1400 audit(1749663088.930:10093): avc: denied { search } for pid=10866 comm="syz.4.2341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 237.348382][T10890] tipc: New replicast peer: 0.0.255.255 [ 237.355356][T10890] tipc: Enabled bearer , priority 10 [ 237.533532][T10900] netlink: zone id is out of range [ 237.538694][T10900] netlink: zone id is out of range [ 237.545844][T10900] netlink: zone id is out of range [ 237.551078][T10900] netlink: zone id is out of range [ 237.556178][T10900] netlink: zone id is out of range [ 237.561984][T10900] netlink: zone id is out of range [ 237.567442][T10900] netlink: zone id is out of range [ 237.573885][T10900] netlink: zone id is out of range [ 237.579001][T10900] netlink: zone id is out of range [ 237.903169][T10908] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2351'. [ 238.236876][T10910] syzkaller0: entered promiscuous mode [ 238.242442][T10910] syzkaller0: entered allmulticast mode [ 240.707512][T10953] bond_slave_1: entered promiscuous mode [ 240.716187][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 240.989949][T10953] bond_slave_1 (unregistering): left promiscuous mode [ 241.231862][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 243.064488][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2375'. [ 243.509301][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 243.509315][ T29] audit: type=1326 audit(1749663097.040:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.541278][ T29] audit: type=1326 audit(1749663097.040:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.566079][ T29] audit: type=1326 audit(1749663097.040:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.591638][ T29] audit: type=1326 audit(1749663097.040:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.657735][ T29] audit: type=1326 audit(1749663097.160:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.682303][ T29] audit: type=1326 audit(1749663097.160:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.3.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 243.843968][T10984] geneve0: entered allmulticast mode [ 243.967965][T10994] lo speed is unknown, defaulting to 1000 [ 243.975317][T10994] lo speed is unknown, defaulting to 1000 [ 244.317292][ T29] audit: type=1326 audit(1749663097.850:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 244.520464][ T6415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 244.528100][ T6415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 244.537623][ T6415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 244.714056][ T29] audit: type=1326 audit(1749663097.880:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 244.741248][ T29] audit: type=1326 audit(1749663097.880:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 244.765782][ T29] audit: type=1326 audit(1749663097.880:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 244.834156][ T6415] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 245.632291][T11015] loop5: detected capacity change from 0 to 2048 [ 245.735152][T11015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.884962][T11015] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 246.127696][T11015] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 246.141796][T11015] EXT4-fs (loop5): This should not happen!! Data will be lost [ 246.141796][T11015] [ 246.154824][T11015] EXT4-fs (loop5): Total free blocks count 0 [ 246.161485][T11015] EXT4-fs (loop5): Free/Dirty block details [ 246.167758][T11015] EXT4-fs (loop5): free_blocks=66060288 [ 246.173339][T11015] EXT4-fs (loop5): dirty_blocks=16 [ 246.178946][T11015] EXT4-fs (loop5): Block reservation details [ 246.187045][T11015] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 246.329435][T11012] lo speed is unknown, defaulting to 1000 [ 246.352100][T11012] lo speed is unknown, defaulting to 1000 [ 246.428869][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.563704][T11030] lo speed is unknown, defaulting to 1000 [ 246.612246][T11030] lo speed is unknown, defaulting to 1000 [ 246.650878][T11012] chnl_net:caif_netlink_parms(): no params data found [ 246.836296][T11012] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.843676][T11012] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.881381][T11012] bridge_slave_0: entered allmulticast mode [ 246.900899][T11012] bridge_slave_0: entered promiscuous mode [ 246.916123][T11012] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.925213][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.951108][T11012] bridge_slave_1: entered allmulticast mode [ 246.965269][T11012] bridge_slave_1: entered promiscuous mode [ 247.030714][T11012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.056235][T11012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.097241][T11012] team0: Port device team_slave_0 added [ 247.105217][T11012] team0: Port device team_slave_1 added [ 247.149453][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2392'. [ 247.160837][T11012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.167827][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.194685][T11012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.215608][T11012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.223482][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.250358][T11012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.288429][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2392'. [ 247.290913][T11012] hsr_slave_0: entered promiscuous mode [ 247.306430][T11012] hsr_slave_1: entered promiscuous mode [ 247.453070][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2397'. [ 247.519048][ T6271] IPVS: starting estimator thread 0... [ 247.525636][T11012] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.545953][T11012] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.555993][T11012] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.574061][T11012] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.596567][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2400'. [ 247.615807][T11068] IPVS: using max 2736 ests per chain, 136800 per kthread [ 247.646500][T11012] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.654082][T11012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.661677][T11012] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.668887][T11012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.720310][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.748379][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.858266][T11012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.940541][T11095] syzkaller0: entered promiscuous mode [ 247.946103][T11095] syzkaller0: entered allmulticast mode [ 247.957041][T11012] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.975210][T11099] macvlan0: entered promiscuous mode [ 247.980695][T11099] macvlan0: entered allmulticast mode [ 247.986623][T11099] bond0: (slave macvlan0): Opening slave failed [ 248.022202][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.029901][ T9256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.076637][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.083832][ T9256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.254067][T11012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.335894][T11119] infiniband syz!: set down [ 248.341441][T11119] infiniband syz!: added team_slave_0 [ 248.366232][T11119] RDS/IB: syz!: added [ 248.372470][T11119] smc: adding ib device syz! with port count 1 [ 248.378769][T11119] smc: ib device syz! port 1 has pnetid [ 248.523493][T11012] veth0_vlan: entered promiscuous mode [ 248.531462][T11012] veth1_vlan: entered promiscuous mode [ 248.560925][T11012] veth0_macvtap: entered promiscuous mode [ 248.568847][T11012] veth1_macvtap: entered promiscuous mode [ 248.612909][T11012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.635047][T11012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.656345][T11012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.666167][T11012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.675442][T11012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.684275][T11012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.750788][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 248.750802][ T29] audit: type=1400 audit(1749663102.290:10411): avc: denied { mounton } for pid=11012 comm="syz-executor" path="/root/syzkaller.VOOlFY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 248.877742][ T29] audit: type=1400 audit(1749663102.410:10412): avc: denied { append } for pid=11141 comm="syz.6.2385" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.995879][ T29] audit: type=1326 audit(1749663102.530:10413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.6.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 249.004773][T11149] lo speed is unknown, defaulting to 1000 [ 249.020720][ T29] audit: type=1326 audit(1749663102.530:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.6.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 249.051635][ T29] audit: type=1326 audit(1749663102.530:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.6.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 249.083502][ T29] audit: type=1326 audit(1749663102.530:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.6.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 249.206551][T11149] lo speed is unknown, defaulting to 1000 [ 249.349457][ T6416] IPVS: starting estimator thread 0... [ 249.378441][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 249.441106][T11167] IPVS: using max 2448 ests per chain, 122400 per kthread [ 249.528447][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 249.539862][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 249.583047][T11175] syzkaller0: entered promiscuous mode [ 249.588873][T11175] syzkaller0: entered allmulticast mode [ 249.618655][T11178] bond6: (slave gretap0): Releasing active interface [ 249.897160][T11181] vlan0: entered allmulticast mode [ 249.904798][T11181] bond0: entered allmulticast mode [ 249.946800][T10699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.499155][ T29] audit: type=1326 audit(1749663103.630:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 250.526133][ T29] audit: type=1326 audit(1749663103.640:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 250.554607][ T29] audit: type=1326 audit(1749663103.640:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 250.582267][ T29] audit: type=1326 audit(1749663103.640:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.5.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 251.288501][T11209] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2449'. [ 251.383896][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2440'. [ 251.395660][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2440'. [ 252.194754][T11233] bridge_slave_0: left allmulticast mode [ 252.201241][T11233] bridge_slave_0: left promiscuous mode [ 252.206944][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.233235][T11233] bridge_slave_1: left allmulticast mode [ 252.239193][T11233] bridge_slave_1: left promiscuous mode [ 252.245031][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.441160][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 252.452215][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 252.471537][T11233] bond0: (slave bond_slave_0): Releasing backup interface [ 252.535725][T11233] bond0: (slave bond_slave_1): Releasing backup interface [ 252.565892][T11233] team0: Port device team_slave_0 removed [ 252.576975][T11233] team0: Port device team_slave_1 removed [ 252.587400][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.595763][T11233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.624208][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.632552][T11233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.704958][T11238] vlan2: entered allmulticast mode [ 252.711232][T11238] bond0: entered allmulticast mode [ 252.747683][T11238] bridge0: port 1(vlan2) entered blocking state [ 252.754200][T11238] bridge0: port 1(vlan2) entered disabled state [ 252.785511][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 252.817700][T11240] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.892408][T11240] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.922826][T11240] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.022255][T11240] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.084088][T11240] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.113286][T11240] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.126499][T11240] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.138979][T11240] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.490326][T11275] loop5: detected capacity change from 0 to 512 [ 253.515132][T11275] EXT4-fs (loop5): too many log groups per flexible block group [ 253.523742][T11275] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 253.541226][T11275] EXT4-fs (loop5): mount failed [ 253.576740][T11275] macvlan0: entered promiscuous mode [ 253.583234][T11275] macvlan0: entered allmulticast mode [ 253.590109][T11275] bond0: (slave macvlan0): Opening slave failed [ 253.769802][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 253.769824][ T29] audit: type=1326 audit(1749663107.310:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2353d858e7 code=0x7ffc0000 [ 253.839613][T11283] vlan0: entered allmulticast mode [ 253.840344][ T29] audit: type=1326 audit(1749663107.310:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353d2ab19 code=0x7ffc0000 [ 253.870635][ T29] audit: type=1326 audit(1749663107.310:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 253.895276][ T29] audit: type=1326 audit(1749663107.310:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2353d858e7 code=0x7ffc0000 [ 253.921415][ T29] audit: type=1326 audit(1749663107.310:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353d2ab19 code=0x7ffc0000 [ 253.946647][ T29] audit: type=1326 audit(1749663107.310:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 253.972423][ T29] audit: type=1326 audit(1749663107.340:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2353d858e7 code=0x7ffc0000 [ 253.996735][ T29] audit: type=1326 audit(1749663107.340:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353d2ab19 code=0x7ffc0000 [ 254.023247][ T29] audit: type=1326 audit(1749663107.340:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 254.047706][ T29] audit: type=1326 audit(1749663107.360:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.6.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2353d858e7 code=0x7ffc0000 [ 254.141577][T11282] wg2: entered promiscuous mode [ 254.147236][T11282] wg2: entered allmulticast mode [ 254.570757][T11294] lo speed is unknown, defaulting to 1000 [ 254.577276][T11294] lo speed is unknown, defaulting to 1000 [ 255.320079][T11301] loop5: detected capacity change from 0 to 1024 [ 255.441542][T11301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.538400][T11301] cgroup: Invalid name [ 255.638358][T11301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.946028][T11310] tmpfs: Bad value for 'size' [ 255.971366][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 255.981028][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 256.018155][T11313] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.108960][T11313] SELinux: syz.5.2467 (11313) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 256.809306][T11290] net_ratelimit: 174 callbacks suppressed [ 256.809322][T11290] Set syz1 is full, maxelem 65536 reached [ 256.821621][T11323] macvlan0: entered promiscuous mode [ 256.827088][T11323] macvlan0: entered allmulticast mode [ 256.856499][T11323] bond0: (slave macvlan0): Opening slave failed [ 256.891544][T11330] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 256.910020][T11330] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.924735][T11326] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2474'. [ 256.939632][T11326] $Hÿ (unregistering): (slave bridge_slave_1): Releasing backup interface [ 256.970013][T11326] $Hÿ (unregistering): Released all slaves [ 257.480954][T11345] lo speed is unknown, defaulting to 1000 [ 257.488260][T11345] lo speed is unknown, defaulting to 1000 [ 257.838753][T11346] loop6: detected capacity change from 0 to 512 [ 257.884027][T11346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.983476][T11346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 258.047972][T11346] System zones: 0-2, 18-18, 34-34 [ 258.230907][T11346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.261534][T11357] tmpfs: Bad value for 'size' [ 258.297551][T11346] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.373430][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 258.382569][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 258.469714][T11012] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.795218][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 258.795236][ T29] audit: type=1326 audit(1749663112.310:11258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 258.867516][ T29] audit: type=1326 audit(1749663112.370:11259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 258.895647][ T29] audit: type=1326 audit(1749663112.370:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 258.921751][ T29] audit: type=1326 audit(1749663112.370:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a14fe929 code=0x7ffc0000 [ 258.962976][T11370] loop5: detected capacity change from 0 to 512 [ 258.970845][T11370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.053375][ T29] audit: type=1326 audit(1749663112.590:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 259.078602][ T29] audit: type=1326 audit(1749663112.590:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 259.155399][T11370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 259.249224][T11370] System zones: 0-2, 18-18, 34-34 [ 259.340395][T11370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.371513][T11370] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.452977][T11381] netlink: 'syz.6.2489': attribute type 10 has an invalid length. [ 259.478068][T11381] bridge_slave_1: entered allmulticast mode [ 259.485989][T11381] bridge_slave_1: entered promiscuous mode [ 259.493951][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.515836][T11382] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2489'. [ 259.528977][T11381] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.545291][ T31] bridge0: port 1(vlan2) entered blocking state [ 259.552240][ T31] bridge0: port 1(vlan2) entered forwarding state [ 259.561541][ T29] audit: type=1400 audit(1749663113.100:11264): avc: denied { write } for pid=11383 comm="syz.5.2490" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 259.568443][T11382] bridge_slave_1: left promiscuous mode [ 259.702673][T11382] bridge0: port 1(vlan2) entered disabled state [ 259.723639][T11382] bridge0: port 1(vlan2) entered disabled state [ 259.745679][T11382] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 259.760138][T11382] bridge_slave_1: left allmulticast mode [ 259.767380][T11382] bond0 (unregistering): Released all slaves [ 259.811183][T11386] bridge0: entered promiscuous mode [ 259.817657][T11386] bridge0: port 1(macsec0) entered blocking state [ 259.825423][T11386] bridge0: port 1(macsec0) entered disabled state [ 259.847392][T11386] macsec0: entered allmulticast mode [ 259.853891][T11386] bridge0: entered allmulticast mode [ 259.871899][T11386] macsec0: left allmulticast mode [ 259.877232][T11386] bridge0: left allmulticast mode [ 259.884753][T11386] bridge0: left promiscuous mode [ 259.971924][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2494'. [ 260.120372][T11389] loop6: detected capacity change from 0 to 512 [ 260.144892][T11389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.180595][T11389] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.225341][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 260.233750][T11401] sit0: left promiscuous mode [ 260.236596][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 260.240274][T11401] sit0: left allmulticast mode [ 260.261136][T11401] vxlan0: left promiscuous mode [ 260.322428][T11012] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.327430][T11407] macvlan2: entered promiscuous mode [ 260.338600][T11407] macvlan2: entered allmulticast mode [ 260.350851][T11407] bond0: (slave macvlan2): Opening slave failed [ 260.378128][T11414] random: crng reseeded on system resumption [ 260.390921][ T29] audit: type=1326 audit(1749663113.930:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.6.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 260.426829][ T29] audit: type=1326 audit(1749663113.930:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.6.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 260.455574][ T29] audit: type=1326 audit(1749663113.930:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.6.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353d8e929 code=0x7ffc0000 [ 260.602774][T11424] netlink: 'syz.0.2508': attribute type 10 has an invalid length. [ 260.613825][T11424] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.626839][T11424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2508'. [ 260.640587][T11424] $Hÿ (unregistering): (slave bridge_slave_1): Releasing backup interface [ 260.654934][T11424] $Hÿ (unregistering): Released all slaves [ 260.669056][T11426] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.678465][T11426] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.687212][T11426] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.696437][T11426] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.707170][T11426] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.716148][T11426] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.725749][T11426] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.734791][T11426] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.787505][T11428] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 260.881773][T11432] netlink: 'syz.5.2512': attribute type 10 has an invalid length. [ 260.894155][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.905007][T11432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 261.192157][T11443] lo speed is unknown, defaulting to 1000 [ 261.200162][T11443] lo speed is unknown, defaulting to 1000 [ 261.647111][T11445] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 262.183627][T11452] tipc: New replicast peer: 255.255.255.255 [ 262.190828][T11452] tipc: Enabled bearer , priority 10 [ 262.362157][T11456] __nla_validate_parse: 1 callbacks suppressed [ 262.362175][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2520'. [ 262.481656][T11459] syzkaller0: entered promiscuous mode [ 262.487216][T11459] syzkaller0: entered allmulticast mode [ 262.509595][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 262.760823][T11469] tipc: Enabling of bearer rejected, failed to enable media [ 262.789603][T11470] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.2533'. [ 262.798819][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2533'. [ 262.832303][T11472] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 262.858252][T11474] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 262.883096][T11474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.911539][T11474] bond2: (slave gretap1): making interface the new active one [ 262.921702][T11474] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 264.033092][T11505] syzkaller0: entered promiscuous mode [ 264.038840][T11505] syzkaller0: entered allmulticast mode [ 264.244214][T11509] bridge0: port 1(macsec1) entered blocking state [ 264.251703][T11509] bridge0: port 1(macsec1) entered disabled state [ 264.258897][T11509] macsec1: entered allmulticast mode [ 264.265685][T11509] bridge0: entered allmulticast mode [ 264.274082][T11509] macsec1: left allmulticast mode [ 264.279308][T11509] bridge0: left allmulticast mode [ 264.504130][T11517] tipc: Enabling of bearer rejected, failed to enable media [ 264.802882][T11526] lo speed is unknown, defaulting to 1000 [ 264.843853][T11526] lo speed is unknown, defaulting to 1000 [ 265.296161][T11539] netlink: 'syz.5.2545': attribute type 21 has an invalid length. [ 265.304270][T11538] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2546'. [ 266.177466][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2554'. [ 266.201181][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2554'. [ 266.213908][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 266.213923][ T29] audit: type=1326 audit(1749663119.750:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11555 comm="syz.5.2554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x0 [ 266.288698][ T29] audit: type=1326 audit(1749663119.820:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.315250][ T29] audit: type=1326 audit(1749663119.820:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.354013][ T29] audit: type=1326 audit(1749663119.880:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.380209][ T29] audit: type=1326 audit(1749663119.880:11589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.406530][ T29] audit: type=1326 audit(1749663119.880:11590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.432705][ T29] audit: type=1326 audit(1749663119.880:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.457826][ T29] audit: type=1326 audit(1749663119.880:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.483508][ T29] audit: type=1326 audit(1749663119.880:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 266.508732][ T29] audit: type=1326 audit(1749663119.890:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 267.385413][T11577] lo speed is unknown, defaulting to 1000 [ 267.441297][T11577] lo speed is unknown, defaulting to 1000 [ 267.781593][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2565'. [ 267.790810][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 268.179683][T11598] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 268.562003][T11604] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2572'. [ 268.584680][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 268.590156][T11608] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 268.602665][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2571'. [ 268.651757][T11608] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 268.716063][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 268.783593][T11618] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.881685][T11618] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.973256][T11618] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.031608][T11618] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.100959][T11618] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.118538][T11618] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.153496][T11618] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.193372][T11618] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.478602][ T3369] hid-generic 0000:0000:30303000.0006: unknown main item tag 0x3 [ 269.488021][ T3369] hid-generic 0000:0000:30303000.0006: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 269.682894][T11606] syz.0.2580 (11606) used greatest stack depth: 5800 bytes left [ 269.707992][T11626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11626 comm=syz.5.2577 [ 269.824229][T11637] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2581'. [ 269.886035][T11635] netlink: 'syz.3.2582': attribute type 21 has an invalid length. [ 270.092147][T11643] lo speed is unknown, defaulting to 1000 [ 270.098277][T11643] lo speed is unknown, defaulting to 1000 [ 271.463575][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 271.463631][ T29] audit: type=1326 audit(1749663124.050:12003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.5.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 272.106126][ T29] audit: type=1326 audit(1749663125.000:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.5.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 272.134170][ T29] audit: type=1326 audit(1749663125.000:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.5.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8006bbe929 code=0x7ffc0000 [ 272.163163][ T29] audit: type=1400 audit(1749663125.610:12006): avc: denied { read } for pid=11657 comm="syz.6.2591" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.188096][ T29] audit: type=1400 audit(1749663125.610:12007): avc: denied { open } for pid=11657 comm="syz.6.2591" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.247513][T11663] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.315132][T11663] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.341727][T11666] tipc: Enabled bearer , priority 0 [ 272.368592][T11664] tipc: Resetting bearer [ 272.415439][T11664] tipc: Disabling bearer [ 272.428511][T11663] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.482785][T11663] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.539473][ T29] audit: type=1400 audit(1749663126.080:12008): avc: denied { sys_module } for pid=11671 comm="syz.3.2596" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 272.551250][T11669] lo speed is unknown, defaulting to 1000 [ 272.574541][T11676] netlink: 'syz.5.2595': attribute type 10 has an invalid length. [ 272.583319][T11676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2595'. [ 272.587724][T11669] lo speed is unknown, defaulting to 1000 [ 272.600871][T11676] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 272.668247][T11663] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.695104][T11663] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.695545][T11680] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.717646][T11680] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 272.720149][T11663] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.762784][T11663] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.807980][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2599'. [ 272.834228][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2599'. [ 272.966193][ T29] audit: type=1326 audit(1749663126.500:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 272.971190][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 272.991387][ T29] audit: type=1326 audit(1749663126.500:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 272.991517][ T29] audit: type=1326 audit(1749663126.500:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 272.991627][ T29] audit: type=1326 audit(1749663126.500:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x7ffc0000 [ 273.098804][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 273.294679][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2600'. [ 273.324640][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2606'. [ 273.337841][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2600'. [ 273.354070][T11700] veth0_macvtap: left promiscuous mode [ 273.446139][T11707] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.494200][T11707] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.545001][T11707] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.574883][T11707] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.683713][T11707] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.700071][T11707] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.717393][T11707] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.734550][T11707] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.851709][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2609'. [ 273.866852][T11712] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.017854][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2621'. [ 274.035147][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2621'. [ 274.602424][T11745] loop5: detected capacity change from 0 to 128 [ 274.619641][T11745] syz.5.2622: attempt to access beyond end of device [ 274.619641][T11745] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 274.622545][T11747] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 274.634566][T11745] syz.5.2622: attempt to access beyond end of device [ 274.634566][T11745] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 274.656181][T11745] syz.5.2622: attempt to access beyond end of device [ 274.656181][T11745] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 274.660545][T11747] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 274.679168][T11745] syz.5.2622: attempt to access beyond end of device [ 274.679168][T11745] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 274.713838][T11745] syz.5.2622: attempt to access beyond end of device [ 274.713838][T11745] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 274.734311][T11745] syz.5.2622: attempt to access beyond end of device [ 274.734311][T11745] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 274.749563][T11752] syz.5.2622: attempt to access beyond end of device [ 274.749563][T11752] loop5: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 274.751145][T11745] syz.5.2622: attempt to access beyond end of device [ 274.751145][T11745] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 274.776948][T11752] syz.5.2622: attempt to access beyond end of device [ 274.776948][T11752] loop5: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 274.778983][T11745] syz.5.2622: attempt to access beyond end of device [ 274.778983][T11745] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 274.911401][T11745] buffer_io_error: 25366 callbacks suppressed [ 274.911418][T11745] Buffer I/O error on dev loop5, logical block 305, async page read [ 274.925549][T11745] Buffer I/O error on dev loop5, logical block 306, async page read [ 274.933719][T11745] Buffer I/O error on dev loop5, logical block 307, async page read [ 274.944954][T11745] Buffer I/O error on dev loop5, logical block 308, async page read [ 274.953745][T11745] Buffer I/O error on dev loop5, logical block 309, async page read [ 274.961895][T11745] Buffer I/O error on dev loop5, logical block 310, async page read [ 274.971212][T11745] Buffer I/O error on dev loop5, logical block 311, async page read [ 274.979418][T11745] Buffer I/O error on dev loop5, logical block 312, async page read [ 274.987932][T11745] Buffer I/O error on dev loop5, logical block 305, async page read [ 274.996211][T11745] Buffer I/O error on dev loop5, logical block 306, async page read [ 275.536990][T11781] netlink: 'syz.4.2632': attribute type 21 has an invalid length. [ 275.775364][T11789] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 276.275265][T11800] xt_hashlimit: size too large, truncated to 1048576 [ 276.684988][T11807] netlink: 'syz.4.2642': attribute type 1 has an invalid length. [ 276.740218][T11807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.762280][T11811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.785181][T11811] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 276.922293][T11811] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 276.948007][T11807] gretap1: entered promiscuous mode [ 276.964160][T11807] bond7: (slave gretap1): making interface the new active one [ 277.042801][T11807] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 277.104712][T11811] bond7: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 277.257107][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 277.257124][ T29] audit: type=1326 audit(1749663130.790:12359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.3.2645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f381839e929 code=0x0 [ 277.301379][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 277.494193][T11836] lo speed is unknown, defaulting to 1000 [ 277.502260][T11836] lo speed is unknown, defaulting to 1000 [ 277.750959][ T29] audit: type=1326 audit(1749663131.280:12360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780611][ T29] audit: type=1326 audit(1749663131.290:12361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780647][ T29] audit: type=1326 audit(1749663131.290:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780676][ T29] audit: type=1326 audit(1749663131.290:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780795][ T29] audit: type=1326 audit(1749663131.290:12364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780826][ T29] audit: type=1326 audit(1749663131.290:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780934][ T29] audit: type=1326 audit(1749663131.290:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 277.780965][ T29] audit: type=1326 audit(1749663131.290:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95db23d290 code=0x7ffc0000 [ 277.813040][T11847] __nla_validate_parse: 9 callbacks suppressed [ 277.813061][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2654'. [ 277.987155][T11849] loop5: detected capacity change from 0 to 1024 [ 277.990498][ T29] audit: type=1326 audit(1749663131.410:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95db23e929 code=0x7ffc0000 [ 278.022183][T11849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.058612][T11855] netlink: 'syz.0.2657': attribute type 39 has an invalid length. [ 278.397129][T11849] ================================================================== [ 278.405296][T11849] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 278.413300][T11849] [ 278.415611][T11849] write to 0xffff88811a44f254 of 4 bytes by task 11847 on cpu 1: [ 278.423403][T11849] xas_set_mark+0x12b/0x140 [ 278.427906][T11849] __folio_start_writeback+0x1dd/0x440 [ 278.433705][T11849] ext4_bio_write_folio+0x5ad/0x9f0 [ 278.438890][T11849] mpage_submit_folio+0xe4/0x170 [ 278.443821][T11849] mpage_process_page_bufs+0x39b/0x4a0 [ 278.449279][T11849] mpage_prepare_extent_to_map+0x741/0xaa0 [ 278.455099][T11849] ext4_do_writepages+0x6ea/0x21c0 [ 278.460202][T11849] ext4_writepages+0x176/0x300 [ 278.464971][T11849] do_writepages+0x1c6/0x310 [ 278.469554][T11849] file_write_and_wait_range+0x156/0x2c0 [ 278.475194][T11849] generic_buffers_fsync_noflush+0x45/0x120 [ 278.481079][T11849] ext4_sync_file+0x1ab/0x690 [ 278.485748][T11849] vfs_fsync_range+0x10d/0x130 [ 278.490597][T11849] ext4_buffered_write_iter+0x34f/0x3c0 [ 278.496149][T11849] ext4_file_write_iter+0xdbf/0xf00 [ 278.501423][T11849] iter_file_splice_write+0x5f2/0x970 [ 278.506789][T11849] direct_splice_actor+0x156/0x2a0 [ 278.512331][T11849] splice_direct_to_actor+0x312/0x680 [ 278.517700][T11849] do_splice_direct+0xda/0x150 [ 278.522459][T11849] do_sendfile+0x380/0x650 [ 278.526864][T11849] __x64_sys_sendfile64+0x105/0x150 [ 278.532051][T11849] x64_sys_call+0xb39/0x2fb0 [ 278.536642][T11849] do_syscall_64+0xd2/0x200 [ 278.541136][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.547463][T11849] [ 278.549776][T11849] read to 0xffff88811a44f254 of 4 bytes by task 11849 on cpu 0: [ 278.557426][T11849] __writeback_single_inode+0x1f9/0x7c0 [ 278.562968][T11849] writeback_single_inode+0x167/0x3e0 [ 278.568610][T11849] sync_inode_metadata+0x5b/0x90 [ 278.573623][T11849] generic_buffers_fsync_noflush+0xd9/0x120 [ 278.579518][T11849] ext4_sync_file+0x1ab/0x690 [ 278.584293][T11849] vfs_fsync_range+0x10d/0x130 [ 278.589043][T11849] ext4_buffered_write_iter+0x34f/0x3c0 [ 278.594587][T11849] ext4_file_write_iter+0xdbf/0xf00 [ 278.599806][T11849] iter_file_splice_write+0x5f2/0x970 [ 278.605197][T11849] direct_splice_actor+0x156/0x2a0 [ 278.610399][T11849] splice_direct_to_actor+0x312/0x680 [ 278.615782][T11849] do_splice_direct+0xda/0x150 [ 278.620544][T11849] do_sendfile+0x380/0x650 [ 278.624964][T11849] __x64_sys_sendfile64+0x105/0x150 [ 278.630156][T11849] x64_sys_call+0xb39/0x2fb0 [ 278.634745][T11849] do_syscall_64+0xd2/0x200 [ 278.639242][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.645213][T11849] [ 278.647551][T11849] value changed: 0x0a000021 -> 0x04000021 [ 278.653255][T11849] [ 278.655578][T11849] Reported by Kernel Concurrency Sanitizer on: [ 278.661734][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.5.2654 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 278.674536][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.684590][T11849] ================================================================== [ 278.896194][ T5988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.