last executing test programs: 6m25.406832947s ago: executing program 32 (id=207): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1008000, 0x800, 0x1}, 0x20) 6m12.356257597s ago: executing program 33 (id=641): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 6m6.89587071s ago: executing program 34 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xfe}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x7, 0x1, 0xfffffff7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5m34.702511091s ago: executing program 35 (id=1809): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0x6) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0xb0001) 5m33.626459738s ago: executing program 36 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c944) 5m28.007364984s ago: executing program 37 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 5m23.611825101s ago: executing program 38 (id=2121): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m21.123843079s ago: executing program 39 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) 5m11.734871402s ago: executing program 40 (id=2468): prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000140)={0xe021, 0x1, [{0x1, 0x1}]}) 5m10.828628426s ago: executing program 41 (id=2489): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f0000000100)='./bus\x00', 0x0) close(r0) 5m6.142826208s ago: executing program 42 (id=2593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 3m46.238730607s ago: executing program 43 (id=5308): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) memfd_secret(0x80000) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) 3m31.58196318s ago: executing program 44 (id=5756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 3m17.906098909s ago: executing program 8 (id=6224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1}) 3m17.85102743s ago: executing program 9 (id=6225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) 3m17.8506996s ago: executing program 8 (id=6226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) 3m17.820478361s ago: executing program 8 (id=6228): lsm_list_modules(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m17.787667041s ago: executing program 8 (id=6229): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m16.990691313s ago: executing program 8 (id=6247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x600}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 3m16.908540984s ago: executing program 9 (id=6249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m16.470069831s ago: executing program 9 (id=6255): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x20, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m16.423150472s ago: executing program 9 (id=6257): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.85041047s ago: executing program 9 (id=6261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x10000000000000) 3m15.502858866s ago: executing program 9 (id=6263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) pselect6(0x40, &(0x7f0000000000)={0x2, 0x8, 0x90a, 0x2, 0x1ff, 0x1, 0xffffffff, 0x7fffffff}, &(0x7f0000000040)={0x5, 0x600, 0xf2a3, 0x82bc, 0x4, 0x576, 0x8000000000000001, 0x867c}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 3m15.500288856s ago: executing program 45 (id=6263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) pselect6(0x40, &(0x7f0000000000)={0x2, 0x8, 0x90a, 0x2, 0x1ff, 0x1, 0xffffffff, 0x7fffffff}, &(0x7f0000000040)={0x5, 0x600, 0xf2a3, 0x82bc, 0x4, 0x576, 0x8000000000000001, 0x867c}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 3m13.629224725s ago: executing program 8 (id=6318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000280)=0x14) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 3m13.591168305s ago: executing program 46 (id=6318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000280)=0x14) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 2m9.04221402s ago: executing program 1 (id=8052): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m8.601231357s ago: executing program 7 (id=8071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m8.192836204s ago: executing program 7 (id=8073): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 2m8.032595506s ago: executing program 1 (id=8077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 2m7.964403047s ago: executing program 1 (id=8078): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x30000000, 0x3) 2m7.849952789s ago: executing program 1 (id=8090): mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81181a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 2m7.7747504s ago: executing program 1 (id=8081): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.626917192s ago: executing program 1 (id=8086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2m7.626780422s ago: executing program 47 (id=8086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2m7.606816982s ago: executing program 7 (id=8089): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r2, 0x0, 0x2, 'b)'}, 0xa) 2m7.498758844s ago: executing program 7 (id=8093): mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81181a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 2m7.479220215s ago: executing program 7 (id=8094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) ioctl$int_in(r0, 0x5421, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m7.392073745s ago: executing program 7 (id=8095): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000300)=ANY=[], 0x1, 0x27c, &(0x7f0000000600)="$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") add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) unshare(0x8000000) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m7.379708596s ago: executing program 48 (id=8095): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000300)=ANY=[], 0x1, 0x27c, &(0x7f0000000600)="$eJzs281qE1EYxvGnH9ov20Sr1VbEF93oZmjjFYTSghhQaiN+gDC1Ew2ZJiUTKhGx3bn1LoTi0p0g3kA3XoELd9247EIc6UxskzaiFXRs8/9tzhvOPOGcnDPhLGY2775aKhUCp+DW1N1l6pX6tSWl1a0exboabXdUH1ezNV0dzX26cPve/RvZXG5mzmw2O38tY2YjF98/ff7m0ofa0J23I+/6tJF+uPkl83ljbGN889v8k2JgxcDKlZq5tlCp1NwF37PFYlByzG75nht4ViwHXrWlv+BXlpfr5pYXhweXq14QmFuuW8mrW61itWrd3MdusWyO49jwoPAr+fW5OTeb9Cjwd1WrWXda0sS+nvx6IgMCAACJanP+X+P83yk4/3eC7fP/g8b924rzPwAAAAAAAAAAAAAAAAAAAAAAh8FWGKbCMEz9aI9J0Rs+YePzgKRBSUOSTkgaljQiKSUpLemkpFOSRiWdlnRG0piks5LOSRpv+q6k54r9kln/gSSnjCbc/52N9e9sTS/u9ktLL1fyK/m4jfuzBRXly9OkUvoarWVDXM9ez81MWiSt80urjfzqSr6nNT+l1PaGaZefivPWmu+L9t1OPqPU9gZrl8+0zffryuWmvKOUPj5SRb4Woz25m38xZTZ9M7cnPxFdd9Q5tqPt+jnOz/rj/AH2x57ft1cTvcnOHVJQf1Zyfd+rUlAcheK1/othHP4i6X8m/Au7i570SAAAAAAAAAAAAAAAAAAAB/GnTwiGq3H+dy5Oeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOz1PQAA//+5gF2o") add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) unshare(0x8000000) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 50.326596532s ago: executing program 5 (id=10387): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 50.231199754s ago: executing program 5 (id=10391): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048041}, 0x44) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) 50.057856406s ago: executing program 5 (id=10399): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 49.984788957s ago: executing program 5 (id=10404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 49.951233068s ago: executing program 5 (id=10405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 49.849298679s ago: executing program 5 (id=10412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x14) close(r2) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 49.82258735s ago: executing program 49 (id=10412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x14) close(r2) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 3.27784548s ago: executing program 4 (id=11684): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) 3.199367161s ago: executing program 4 (id=11688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "1dc000965d5ed12a79d6735c9663ca2ce69080cd47cbdf3a1de3f0602cfbe71b", "af847c1c74e2b5ca7dc31cb29b38dae9", {"739ee16857b655955ebef3cae1d4e5f3", "51d2b3717c945e296ca34099cd504e04"}}}}}}}, 0x0) 2.354901904s ago: executing program 4 (id=11727): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.329531684s ago: executing program 4 (id=11729): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a49", 0xf4}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c", 0x71}], 0x2}}], 0x1, 0x4000) close(r0) 2.254976496s ago: executing program 4 (id=11730): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 1.133900683s ago: executing program 4 (id=11751): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 1.076105084s ago: executing program 0 (id=11753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7882, &(0x7f0000000a40)={0x0, 0x17fe, 0x2, 0xfffffffe, 0x3bd}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.038424464s ago: executing program 0 (id=11755): mkdirat(0xffffffffffffff9c, 0x0, 0x80) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 934.431336ms ago: executing program 0 (id=11759): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c240206060204"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0xf8, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x313140, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb905}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 925.863516ms ago: executing program 3 (id=11760): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 852.092117ms ago: executing program 2 (id=11761): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu&00\t&&') 782.996408ms ago: executing program 3 (id=11763): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x2000000000000029, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 646.32223ms ago: executing program 2 (id=11764): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x20024, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @mcast2, 0x1}, 0x1c) 614.852331ms ago: executing program 3 (id=11765): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 614.721561ms ago: executing program 2 (id=11766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 576.295371ms ago: executing program 2 (id=11768): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 551.777512ms ago: executing program 2 (id=11769): setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) 457.698693ms ago: executing program 2 (id=11771): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket(0x8000000010, 0x2, 0x0) syz_usbip_server_init(0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 456.778733ms ago: executing program 3 (id=11772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mkdir(0x0, 0x0) 420.537564ms ago: executing program 3 (id=11773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close(0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 392.297084ms ago: executing program 6 (id=11774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 391.835924ms ago: executing program 3 (id=11775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) getpgid(r0) 381.544494ms ago: executing program 0 (id=11776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYBLOB="0000000000000000b7080000000000107b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 362.985135ms ago: executing program 0 (id=11777): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "46174562000000000000000000002000", "c6ff1b00", "2e9c588f00"}, 0x28) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10121, 0x0) shutdown(r0, 0x0) 198.891717ms ago: executing program 0 (id=11778): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x10000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 198.386197ms ago: executing program 6 (id=11788): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 72.253389ms ago: executing program 6 (id=11779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 53.631469ms ago: executing program 6 (id=11780): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 896.73µs ago: executing program 6 (id=11781): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 6 (id=11782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) kernel console output (not intermixed with test programs): T27403] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9717'. [ 357.499431][T27409] loop5: detected capacity change from 0 to 512 [ 357.508070][T27403] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9717'. [ 357.555101][T27403] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9717'. [ 357.564217][T27403] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9717'. [ 357.746608][T27437] atomic_op ffff88811d7d0928 conn xmit_atomic 0000000000000000 [ 357.975809][T27436] lo speed is unknown, defaulting to 1000 [ 358.110121][T27436] netlink: 'syz.4.9728': attribute type 2 has an invalid length. [ 358.162536][T27459] netlink: 'syz.5.9738': attribute type 3 has an invalid length. [ 358.170387][T27459] netlink: 'syz.5.9738': attribute type 3 has an invalid length. [ 358.198932][T27465] netlink: 'syz.0.9741': attribute type 4 has an invalid length. [ 358.234228][T27465] netlink: 'syz.0.9741': attribute type 4 has an invalid length. [ 358.359910][T27481] xt_hashlimit: size too large, truncated to 1048576 [ 358.406372][T27469] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 358.494114][T27487] netlink: 'syz.3.9750': attribute type 27 has an invalid length. [ 358.564789][T27487] dummy0: left promiscuous mode [ 358.601698][T27487] wg2: left promiscuous mode [ 358.606722][T27487] wg2: left allmulticast mode [ 358.615530][T27487] ipip0: left promiscuous mode [ 358.620607][T27487] bond2: left promiscuous mode [ 358.695969][T27493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.717802][T27493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.737798][T27508] pimreg: entered allmulticast mode [ 358.761494][T27508] pimreg: left allmulticast mode [ 358.876159][T27524] tls_set_device_offload: netdev not found [ 358.923322][T27531] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 359.136673][T27569] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 359.512140][T27628] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.529291][T27631] netlink: 'syz.0.9783': attribute type 1 has an invalid length. [ 359.550238][T27631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.572766][T27628] bond0: (slave bridge0): Releasing backup interface [ 359.584892][T27628] bridge0: left allmulticast mode [ 359.593383][T27628] bridge_slave_0: left promiscuous mode [ 359.599391][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.628726][T27628] bridge_slave_1: left allmulticast mode [ 359.634740][T27628] bridge_slave_1: left promiscuous mode [ 359.640653][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.657117][T27628] bond0: (slave bond_slave_0): Releasing backup interface [ 359.675589][T27628] bond_slave_0: left allmulticast mode [ 359.686712][T27628] team0: Port device team_slave_0 removed [ 359.695518][T27628] team0: Port device team_slave_1 removed [ 359.731536][T27628] team0: Port device geneve1 removed [ 359.738446][T27628] bond4: (slave bond5): Releasing backup interface [ 359.757846][T27631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.767602][T27631] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 359.823995][T27631] bond1: (slave vti0): Error -95 calling set_mac_address [ 360.007678][T27683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.026715][T27686] loop5: detected capacity change from 0 to 512 [ 360.054461][T27686] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.060974][T27686] EXT4-fs: Ignoring removed bh option [ 360.065876][T27684] lo speed is unknown, defaulting to 1000 [ 360.069330][T27686] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 360.094060][T27686] EXT4-fs (loop5): 1 truncate cleaned up [ 360.100242][T27686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.398603][T18844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.445948][T27706] tipc: Enabled bearer , priority 0 [ 360.464553][T27706] tipc: Resetting bearer [ 360.482501][T27705] tipc: Disabling bearer [ 360.589650][T27718] __nla_validate_parse: 19 callbacks suppressed [ 360.589670][T27718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9816'. [ 360.605152][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9816'. [ 360.618245][T27718] wireguard0: entered promiscuous mode [ 360.624061][T27718] wireguard0: entered allmulticast mode [ 360.778528][T27740] tipc: Enabling of bearer rejected, failed to enable media [ 360.834592][T27748] ip6gre1: entered allmulticast mode [ 360.843599][T27750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27750 comm=syz.4.9831 [ 360.973088][T27761] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9836'. [ 360.995289][T27765] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9838'. [ 361.031243][T27770] loop2: detected capacity change from 0 to 512 [ 361.038522][T27770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.060422][T27770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.083977][T27770] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.114520][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.126089][T27747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9829'. [ 361.135405][T27747] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 361.225141][T12675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12675 comm=kworker/0:10 [ 361.248098][T27788] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 361.729075][T27820] loop5: detected capacity change from 0 to 512 [ 361.739837][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 361.739856][ T29] audit: type=1400 audit(1750725018.329:20708): avc: denied { sqpoll } for pid=27817 comm="syz.2.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.771134][T27823] sch_fq: defrate 0 ignored. [ 361.786278][T27820] EXT4-fs: Invalid want_extra_isize 7 [ 361.838325][T27820] lo speed is unknown, defaulting to 1000 [ 361.875164][T27826] validate_nla: 1 callbacks suppressed [ 361.875179][T27826] netlink: 'syz.5.9860': attribute type 12 has an invalid length. [ 361.926237][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9863'. [ 361.935301][T27828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9863'. [ 361.952559][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 361.980954][T27828] wireguard0: entered promiscuous mode [ 361.986767][T27828] wireguard0: entered allmulticast mode [ 362.152062][ T5824] bridge_slave_1: left allmulticast mode [ 362.153709][T27792] syz.3.9848 (27792) used greatest stack depth: 4832 bytes left [ 362.157805][ T5824] bridge_slave_1: left promiscuous mode [ 362.171411][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.209123][ T5824] bridge_slave_0: left allmulticast mode [ 362.214867][ T5824] bridge_slave_0: left promiscuous mode [ 362.220675][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.346035][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.359956][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.384158][ T5824] bond0 (unregistering): (slave team0): Releasing backup interface [ 362.394179][ T5824] bond0 (unregistering): Released all slaves [ 362.553554][ T5824] hsr_slave_0: left promiscuous mode [ 362.559420][ T5824] hsr_slave_1: left promiscuous mode [ 362.570706][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.578225][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.613016][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.620615][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.634663][ T5824] veth1_macvtap: left promiscuous mode [ 362.640396][ T5824] veth0_macvtap: left promiscuous mode [ 362.650550][ T5824] veth1_vlan: left promiscuous mode [ 362.661907][ T5824] veth0_vlan: left promiscuous mode [ 362.689767][ T29] audit: type=1400 audit(1750725019.280:20709): avc: denied { mount } for pid=27866 comm="syz.5.9878" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 362.826436][ T29] audit: type=1400 audit(1750725019.320:20710): avc: denied { unmount } for pid=18844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 362.874877][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 362.905255][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 363.240217][ T29] audit: type=1400 audit(1750725019.830:20711): avc: denied { bind } for pid=27913 comm="syz.5.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 363.288363][T27924] netlink: 'syz.2.9907': attribute type 32 has an invalid length. [ 363.296376][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9907'. [ 363.376571][T27940] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.417995][ T29] audit: type=1326 audit(1750725020.010:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27946 comm="syz.2.9912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23d443e929 code=0x0 [ 364.184809][T27961] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 364.352583][ T29] audit: type=1400 audit(1750725020.940:20713): avc: denied { write } for pid=27979 comm="syz.4.9925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 364.377379][T27983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9926'. [ 364.439288][ T29] audit: type=1326 audit(1750725021.030:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27984 comm="syz.0.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5d21e929 code=0x7ffc0000 [ 364.462960][ T29] audit: type=1326 audit(1750725021.030:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27984 comm="syz.0.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5d21e929 code=0x7ffc0000 [ 364.486798][ T29] audit: type=1326 audit(1750725021.030:20716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27984 comm="syz.0.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d5d21e929 code=0x7ffc0000 [ 364.510479][ T29] audit: type=1326 audit(1750725021.030:20717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27984 comm="syz.0.9927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5d21e929 code=0x7ffc0000 [ 364.514291][T27990] bridge: RTM_NEWNEIGH with invalid ether address [ 364.614023][T27992] loop5: detected capacity change from 0 to 2048 [ 364.657565][T27996] xt_hashlimit: max too large, truncated to 1048576 [ 364.673320][T27998] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.9933'. [ 364.989700][T28033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28033 comm=syz.4.9949 [ 365.123425][T28056] 0ªX¹¦À: renamed from caif0 [ 365.143057][T28056] 0ªX¹¦À: entered allmulticast mode [ 365.148410][T28056] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 365.255823][T28070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28070 comm=syz.4.9967 [ 365.281464][T28070] vlan0: entered allmulticast mode [ 365.286762][T28070] bond7: entered allmulticast mode [ 365.497208][T28095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 365.534946][T28099] loop2: detected capacity change from 0 to 512 [ 365.545351][T28099] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.9979: bg 0: block 5: invalid block bitmap [ 365.562722][T28099] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 365.582537][T28099] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9979: invalid indirect mapped block 3 (level 2) [ 365.600015][T28099] EXT4-fs (loop2): 2 truncates cleaned up [ 365.606845][T28099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.695869][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.906819][T28129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28129 comm=syz.2.9993 [ 365.934267][T28129] __nla_validate_parse: 12 callbacks suppressed [ 365.934286][T28129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9993'. [ 365.977797][T28134] --map-set only usable from mangle table [ 366.019012][T28129] vlan2: entered allmulticast mode [ 366.024398][T28129] bond1: entered allmulticast mode [ 366.303370][T28173] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 366.307862][T28174] loop2: detected capacity change from 0 to 128 [ 366.336664][T28174] vfat: Unknown parameter 'ŽC†ãtname' [ 366.516418][T28187] uprobe: syz.3.10017:28187 failed to unregister, leaking uprobe [ 366.773370][T28201] batadv_slave_0: entered promiscuous mode [ 366.990558][T28217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28217 comm=syz.0.10026 [ 366.991223][T28214] macsec0: entered promiscuous mode [ 367.008557][T28214] bridge0: entered promiscuous mode [ 367.015682][T28214] bridge0: port 1(macsec0) entered blocking state [ 367.022311][T28214] bridge0: port 1(macsec0) entered disabled state [ 367.023793][T28217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10026'. [ 367.029691][T28214] macsec0: entered allmulticast mode [ 367.043431][T28214] bridge0: entered allmulticast mode [ 367.049868][T28214] macsec0: left allmulticast mode [ 367.055020][T28214] bridge0: left allmulticast mode [ 367.060750][T28214] bridge0: left promiscuous mode [ 367.080353][T28221] vlan2: entered allmulticast mode [ 367.085604][T28221] bond2: entered allmulticast mode [ 367.098032][T28225] netlink: 'syz.2.10032': attribute type 1 has an invalid length. [ 367.131832][T28225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.154626][T28225] bond2: (slave gretap1): making interface the new active one [ 367.164916][T28225] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 367.199392][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 367.199448][ T29] audit: type=1326 audit(1750725023.790:20852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28234 comm="syz.4.10036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff71964e929 code=0x0 [ 367.230484][T28225] bond2 (unregistering): (slave gretap1): Releasing active interface [ 367.243552][T28225] bond2 (unregistering): Released all slaves [ 367.261212][ T29] audit: type=1400 audit(1750725023.850:20853): avc: denied { accept } for pid=28241 comm="syz.5.10040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 367.359525][ T29] audit: type=1400 audit(1750725023.950:20854): avc: denied { map } for pid=28246 comm="syz.0.10042" path="socket:[90599]" dev="sockfs" ino=90599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 367.380842][T28251] loop2: detected capacity change from 0 to 2048 [ 367.383043][ T29] audit: type=1400 audit(1750725023.950:20855): avc: denied { read } for pid=28246 comm="syz.0.10042" path="socket:[90599]" dev="sockfs" ino=90599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 367.419767][T28253] macsec0: entered promiscuous mode [ 367.425285][T28253] macsec0: entered allmulticast mode [ 367.431505][T28253] veth1_macvtap: entered allmulticast mode [ 367.437447][T28253] veth1_macvtap: entered promiscuous mode [ 367.443517][T28253] macsec0: left promiscuous mode [ 367.444263][T28251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.448499][T28253] veth1_macvtap: left promiscuous mode [ 367.466298][T28253] macsec0: left allmulticast mode [ 367.471421][T28253] veth1_macvtap: left allmulticast mode [ 367.495566][T28251] EXT4-fs (loop2): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 367.505897][ T29] audit: type=1400 audit(1750725024.090:20856): avc: denied { remount } for pid=28250 comm="syz.2.10044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 367.533066][T28251] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 367.553904][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.576318][T28263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28263 comm=syz.5.10049 [ 367.590551][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10049'. [ 367.613583][T28263] vlan0: entered allmulticast mode [ 367.618754][T28263] bond3: entered allmulticast mode [ 367.676835][ T29] audit: type=1400 audit(1750725024.270:20857): avc: denied { watch_reads } for pid=28275 comm="syz.3.10055" path="/1563" dev="tmpfs" ino=8078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 367.806776][T28284] loop5: detected capacity change from 0 to 2048 [ 367.853958][T28284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.894239][T28293] xt_hashlimit: max too large, truncated to 1048576 [ 367.924615][T28284] EXT4-fs (loop5): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 367.942321][T28284] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 367.974407][T18844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.020426][T28303] set match dimension is over the limit! [ 368.061408][ T29] audit: type=1400 audit(1750725024.650:20858): avc: denied { ioctl } for pid=28305 comm="syz.4.10068" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.747682][ T29] audit: type=1326 audit(1750725025.340:20859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.3.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 368.771539][ T29] audit: type=1326 audit(1750725025.340:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.3.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 368.795876][ T29] audit: type=1326 audit(1750725025.340:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28341 comm="syz.3.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 368.879487][T28352] uprobe: syz.0.10090:28352 failed to unregister, leaking uprobe [ 368.916581][T28354] loop2: detected capacity change from 0 to 512 [ 368.929002][T28354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.026200][T28354] EXT4-fs (loop2): 1 truncate cleaned up [ 369.034235][T28354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.069798][T28369] lo speed is unknown, defaulting to 1000 [ 369.103544][T12690] kernel read not supported for file inotify (pid: 12690 comm: kworker/1:10) [ 369.217681][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.271237][T28392] loop5: detected capacity change from 0 to 2048 [ 369.344288][T28392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.373908][T28402] lo speed is unknown, defaulting to 1000 [ 369.414738][T18844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.640539][T28425] uprobe: syz.5.10120:28425 failed to unregister, leaking uprobe [ 369.685619][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10121'. [ 369.928615][T28432] netlink: 'syz.5.10123': attribute type 10 has an invalid length. [ 369.936674][T28432] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10123'. [ 369.960332][T28432] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 370.291437][T28445] netlink: 'syz.3.10129': attribute type 1 has an invalid length. [ 370.341597][T28445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.397895][T28445] bond5: (slave gretap1): making interface the new active one [ 370.440383][T28445] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 370.506254][T28462] bond5 (unregistering): (slave gretap1): Releasing active interface [ 370.538492][T28462] bond5 (unregistering): Released all slaves [ 370.620767][T28465] lo speed is unknown, defaulting to 1000 [ 370.854752][T28486] 9pnet_fd: Insufficient options for proto=fd [ 370.876321][T28491] netlink: 'syz.2.10145': attribute type 10 has an invalid length. [ 370.884341][T28491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10145'. [ 370.904382][T28491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.913226][T28491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922110][T28491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.930978][T28491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.942826][T28497] futex_wake_op: syz.4.10146 tries to shift op by -1; fix this program [ 370.948279][T28491] team0: Port device geneve1 added [ 371.082541][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10157'. [ 371.118418][T28520] bridge0: port 1(macvlan2) entered blocking state [ 371.125122][T28520] bridge0: port 1(macvlan2) entered disabled state [ 371.150203][T28520] macvlan2: entered allmulticast mode [ 371.155813][T28520] bridge0: entered allmulticast mode [ 371.172168][T28532] uprobe: syz.2.10159:28532 failed to unregister, leaking uprobe [ 371.206910][T28520] macvlan2: left allmulticast mode [ 371.212329][T28520] bridge0: left allmulticast mode [ 371.638938][T28576] netlink: 'syz.3.10176': attribute type 1 has an invalid length. [ 371.653805][T28576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.666758][T28576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10176'. [ 371.678158][T28576] bond5 (unregistering): Released all slaves [ 371.949763][T28591] lo speed is unknown, defaulting to 1000 [ 371.955729][T28591] lo speed is unknown, defaulting to 1000 [ 371.961677][T28591] lo speed is unknown, defaulting to 1000 [ 371.969110][T28591] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 371.981598][T28591] lo speed is unknown, defaulting to 1000 [ 371.987877][T28591] lo speed is unknown, defaulting to 1000 [ 371.994232][T28591] lo speed is unknown, defaulting to 1000 [ 372.000267][T28591] lo speed is unknown, defaulting to 1000 [ 372.006404][T28591] lo speed is unknown, defaulting to 1000 [ 372.012501][T28591] lo speed is unknown, defaulting to 1000 [ 372.018585][T28591] lo speed is unknown, defaulting to 1000 [ 372.024815][T28591] lo speed is unknown, defaulting to 1000 [ 372.070316][T28593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10184'. [ 372.087719][T28593] netlink: 65536 bytes leftover after parsing attributes in process `syz.3.10184'. [ 372.097470][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10184'. [ 372.208911][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 372.208993][ T29] audit: type=1326 audit(1750725028.800:21279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.219397][T28601] lo speed is unknown, defaulting to 1000 [ 372.263056][T28605] block device autoloading is deprecated and will be removed. [ 372.266263][T28601] lo speed is unknown, defaulting to 1000 [ 372.279487][ T29] audit: type=1326 audit(1750725028.860:21280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.303255][ T29] audit: type=1326 audit(1750725028.860:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.326991][ T29] audit: type=1326 audit(1750725028.860:21282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.350738][ T29] audit: type=1326 audit(1750725028.860:21283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.374486][ T29] audit: type=1326 audit(1750725028.860:21284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.398204][ T29] audit: type=1326 audit(1750725028.860:21285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.422035][ T29] audit: type=1326 audit(1750725028.870:21286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.445801][ T29] audit: type=1326 audit(1750725028.870:21287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe410cad197 code=0x7ffc0000 [ 372.469637][ T29] audit: type=1326 audit(1750725028.870:21288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.5.10189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 372.552597][T28618] netlink: 2564 bytes leftover after parsing attributes in process `syz.5.10195'. [ 372.571750][T28622] 9pnet: p9_errstr2errno: server reported unknown error [ 372.699050][T28636] loop5: detected capacity change from 0 to 128 [ 372.946237][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10207'. [ 372.958623][T28648] bridge0: entered promiscuous mode [ 372.965498][T28648] bridge0: port 3(macvlan2) entered blocking state [ 372.972135][T28648] bridge0: port 3(macvlan2) entered disabled state [ 372.979181][T28648] macvlan2: entered allmulticast mode [ 372.984666][T28648] bridge0: entered allmulticast mode [ 372.999260][T28648] macvlan2: left allmulticast mode [ 373.004555][T28648] bridge0: left allmulticast mode [ 373.018999][T28648] bridge0: left promiscuous mode [ 373.211254][T28658] netlink: 'syz.2.10210': attribute type 1 has an invalid length. [ 373.269918][T28658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.298600][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10210'. [ 373.311360][T28666] bond2 (unregistering): Released all slaves [ 373.502508][T28684] netlink: 'syz.5.10218': attribute type 1 has an invalid length. [ 373.520277][T28684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.531166][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10218'. [ 373.553210][T28684] bond4 (unregistering): Released all slaves [ 373.652274][T28698] SELinux: policydb version 0 does not match my version range 15-34 [ 373.660681][T28698] SELinux: failed to load policy [ 373.868477][T28717] loop2: detected capacity change from 0 to 512 [ 373.892433][T28717] EXT4-fs: dax option not supported [ 373.918960][T28720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10231'. [ 374.268884][T28742] loop2: detected capacity change from 0 to 512 [ 374.276349][T28742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 374.295051][T28742] EXT4-fs (loop2): 1 truncate cleaned up [ 374.302551][T28742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.527555][T28766] ip6gre1: entered allmulticast mode [ 374.561274][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.572506][T28782] netlink: 'syz.5.10258': attribute type 3 has an invalid length. [ 374.639820][T28786] loop2: detected capacity change from 0 to 2048 [ 374.692197][T28786] loop2: p1 < > p4 [ 374.698483][T28786] loop2: p4 size 8388608 extends beyond EOD, truncated [ 374.928642][T28815] loop2: detected capacity change from 0 to 512 [ 374.955851][T28815] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 374.970708][T28815] EXT4-fs (loop2): mount failed [ 375.220059][T28823] loop2: detected capacity change from 0 to 512 [ 375.226931][T28823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.238778][T28823] EXT4-fs (loop2): 1 truncate cleaned up [ 375.245159][T28823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.282649][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.420190][T28832] IPv4: Oversized IP packet from 127.202.26.0 [ 375.443128][T28836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.492541][T28836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.543252][T28836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.603324][T28836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.658496][T28836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.671065][T28836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.683396][T28836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.695663][T28836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.779615][T28864] lo speed is unknown, defaulting to 1000 [ 375.787585][T28864] lo speed is unknown, defaulting to 1000 [ 375.814169][T28874] netlink: 'syz.0.10291': attribute type 16 has an invalid length. [ 375.822264][T28874] netlink: 'syz.0.10291': attribute type 17 has an invalid length. [ 375.834227][T28872] SELinux: failed to load policy [ 375.990694][T28892] loop7: detected capacity change from 0 to 16384 [ 375.997540][T28874] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 376.024129][T28886] lo speed is unknown, defaulting to 1000 [ 376.042035][T28886] lo speed is unknown, defaulting to 1000 [ 376.059171][T28892] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 376.169358][T28892] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 23 prio class 0 [ 376.207996][T28892] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.217581][T28892] buffer_io_error: 8 callbacks suppressed [ 376.217595][T28892] Buffer I/O error on dev loop7, logical block 288, async page read [ 376.260323][T28892] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 376.270143][T28892] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 376.278645][T28892] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 376.287064][T28892] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 376.295522][T28892] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 376.303992][T28892] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 376.312429][T28892] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 376.320799][T28892] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 376.329213][T28892] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 376.337625][T28892] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 376.359880][T28899] netlink: 'syz.0.10306': attribute type 1 has an invalid length. [ 376.381312][T28899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.390500][T28892] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 376.411756][T28899] __nla_validate_parse: 3 callbacks suppressed [ 376.411777][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10306'. [ 376.432687][T28892] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 376.500235][T28899] bond3 (unregistering): Released all slaves [ 376.910871][T28932] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10319'. [ 377.121773][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.130857][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.141691][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.180932][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.190102][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.199914][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.248020][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.257322][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10324'. [ 377.471960][ T5824] bond1 (unregistering): (slave gretap1): Releasing active interface [ 377.521470][ T5824] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 377.529682][ T5824] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 377.567789][T28964] SELinux: failed to load policy [ 377.646442][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 377.646461][ T29] audit: type=1400 audit(1750725034.230:21356): avc: denied { setattr } for pid=28968 comm="syz.5.10332" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.715551][ T5824] bond0 (unregistering): (slave team0): Releasing backup interface [ 377.727372][ T5824] bond0 (unregistering): Released all slaves [ 377.737579][ T5824] bond1 (unregistering): Released all slaves [ 377.817986][ T5824] hsr_slave_0: left promiscuous mode [ 377.824145][ T5824] hsr_slave_1: left promiscuous mode [ 377.842691][ T5824] veth1_vlan: left promiscuous mode [ 377.849213][ T5824] veth0_vlan: left promiscuous mode [ 378.259601][T29010] openvswitch: netlink: Message has 6 unknown bytes. [ 378.549877][T28966] syz.4.10331 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 378.561331][T28966] CPU: 0 UID: 0 PID: 28966 Comm: syz.4.10331 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 378.561370][T28966] Tainted: [W]=WARN [ 378.561377][T28966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.561441][T28966] Call Trace: [ 378.561449][T28966] [ 378.561458][T28966] __dump_stack+0x1d/0x30 [ 378.561486][T28966] dump_stack_lvl+0xe8/0x140 [ 378.561510][T28966] dump_stack+0x15/0x1b [ 378.561537][T28966] dump_header+0x81/0x220 [ 378.561652][T28966] oom_kill_process+0x334/0x3f0 [ 378.561687][T28966] out_of_memory+0x979/0xb80 [ 378.561721][T28966] try_charge_memcg+0x5e6/0x9e0 [ 378.561892][T28966] charge_memcg+0x51/0xc0 [ 378.561935][T28966] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 378.562016][T28966] __read_swap_cache_async+0x1df/0x350 [ 378.562057][T28966] swap_cluster_readahead+0x277/0x3e0 [ 378.562117][T28966] swapin_readahead+0xde/0x6f0 [ 378.562157][T28966] ? __filemap_get_folio+0x4f7/0x6b0 [ 378.562193][T28966] ? enqueue_task_fair+0x35e/0x980 [ 378.562292][T28966] ? swap_cache_get_folio+0x77/0x200 [ 378.562445][T28966] do_swap_page+0x301/0x2430 [ 378.562468][T28966] ? drain_stock+0xa6/0x120 [ 378.562490][T28966] ? percpu_array_map_lookup_percpu_elem+0x9c/0xd0 [ 378.562587][T28966] ? __pfx_default_wake_function+0x10/0x10 [ 378.562621][T28966] handle_mm_fault+0x9a5/0x2be0 [ 378.562652][T28966] ? mas_walk+0xf2/0x120 [ 378.562689][T28966] do_user_addr_fault+0x636/0x1090 [ 378.562792][T28966] ? fpregs_restore_userregs+0xe2/0x1d0 [ 378.562822][T28966] ? arch_exit_work+0x30/0x40 [ 378.562846][T28966] exc_page_fault+0x62/0xa0 [ 378.562995][T28966] asm_exc_page_fault+0x26/0x30 [ 378.563015][T28966] RIP: 0033:0x7ff719527dc9 [ 378.563032][T28966] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 378.563055][T28966] RSP: 002b:00007fff445a7af0 EFLAGS: 00010202 [ 378.563076][T28966] RAX: 00007ff718f4f8e0 RBX: 00007ff718f4f8e8 RCX: ffffffff818d5863 [ 378.563158][T28966] RDX: 000000000000001e RSI: 00007ff718f9c7d8 RDI: 00007ff718f4f8e8 [ 378.563175][T28966] RBP: 00007ff718f23fa0 R08: 00007ff718f603b8 R09: 00007ff719862000 [ 378.563189][T28966] R10: 00007ff718cbf008 R11: 0000000000000004 R12: 00007ff718f23f98 [ 378.563202][T28966] R13: 000000000000001e R14: ffffffffffffffff R15: 00007ff718cbf008 [ 378.563222][T28966] ? page_counter_charge+0xb3/0x230 [ 378.563303][T28966] [ 378.804786][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.812811][T28966] memory: usage 307200kB, limit 307200kB, failcnt 9883 [ 378.819803][T28966] memory+swap: usage 308464kB, limit 9007199254740988kB, failcnt 0 [ 378.828226][T28966] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 378.835589][T28966] Memory cgroup stats for /syz4: [ 378.941645][T28966] cache 8192 [ 378.949922][T28966] rss 0 [ 378.952813][T28966] shmem 0 [ 378.955819][T28966] mapped_file 0 [ 378.959375][T28966] dirty 0 [ 378.962454][T28966] writeback 0 [ 378.965764][T28966] workingset_refault_anon 866 [ 378.970467][T28966] workingset_refault_file 33 [ 378.975245][T28966] swap 1298432 [ 378.978665][T28966] swapcached 0 [ 378.982075][T28966] pgpgin 530045 [ 378.985551][T28966] pgpgout 530043 [ 378.989215][T28966] pgfault 511863 [ 378.992828][T28966] pgmajfault 127 [ 378.996451][T28966] inactive_anon 0 [ 379.000107][T28966] active_anon 0 [ 379.002760][ T29] audit: type=1326 audit(1750725035.550:21357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.003647][T28966] inactive_file 8192 [ 379.027372][ T29] audit: type=1326 audit(1750725035.550:21358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.031214][T28966] active_file 0 [ 379.031249][T28966] unevictable 0 [ 379.031257][T28966] hierarchical_memory_limit 314572800 [ 379.054882][ T29] audit: type=1326 audit(1750725035.550:21359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.058349][T28966] hierarchical_memsw_limit 9223372036854771712 [ 379.061848][ T29] audit: type=1326 audit(1750725035.550:21360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.067176][T28966] total_cache 8192 [ 379.067187][T28966] total_rss 0 [ 379.090820][ T29] audit: type=1326 audit(1750725035.550:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.097097][T28966] total_shmem 0 [ 379.120614][ T29] audit: type=1326 audit(1750725035.550:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.124371][T28966] total_mapped_file 0 [ 379.124381][T28966] total_dirty 0 [ 379.124388][T28966] total_writeback 0 [ 379.124395][T28966] total_workingset_refault_anon 866 [ 379.127736][ T29] audit: type=1326 audit(1750725035.550:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.151392][T28966] total_workingset_refault_file 33 [ 379.154884][ T29] audit: type=1326 audit(1750725035.550:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.178605][T28966] total_swap 1298432 [ 379.178617][T28966] total_swapcached 0 [ 379.178625][T28966] total_pgpgin 530045 [ 379.178634][T28966] total_pgpgout 530043 [ 379.178643][T28966] total_pgfault 511863 [ 379.182646][ T29] audit: type=1326 audit(1750725035.550:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29045 comm="syz.5.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe410cae929 code=0x7ffc0000 [ 379.186095][T28966] total_pgmajfault 127 [ 379.296057][T28966] total_inactive_anon 0 [ 379.300446][T28966] total_active_anon 0 [ 379.304540][T28966] total_inactive_file 8192 [ 379.309000][T28966] total_active_file 0 [ 379.313120][T28966] total_unevictable 0 [ 379.317115][T28966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10331,pid=28966,uid=0 [ 379.332276][T28966] Memory cgroup out of memory: Killed process 28966 (syz.4.10331) total-vm:95800kB, anon-rss:940kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 379.850620][T29076] lo speed is unknown, defaulting to 1000 [ 379.858316][T29076] lo speed is unknown, defaulting to 1000 [ 379.960536][T29108] ref_ctr increment failed for inode: 0xfb7 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117ebed40 [ 379.972569][T29107] uprobe: syz.5.10387:29107 failed to unregister, leaking uprobe [ 380.063069][T29117] lo speed is unknown, defaulting to 1000 [ 380.069503][T29117] lo speed is unknown, defaulting to 1000 [ 380.244711][T29134] 9pnet: Could not find request transport: 0xffffffffffffffff [ 380.602451][T29176] lo speed is unknown, defaulting to 1000 [ 380.609088][T29176] lo speed is unknown, defaulting to 1000 [ 380.663784][T29169] lo speed is unknown, defaulting to 1000 [ 380.680618][T29169] lo speed is unknown, defaulting to 1000 [ 380.687596][ T5826] bridge_slave_1: left allmulticast mode [ 380.693357][ T5826] bridge_slave_1: left promiscuous mode [ 380.699087][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.707928][ T5826] bridge_slave_0: left promiscuous mode [ 380.713807][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.888723][T29187] loop2: detected capacity change from 0 to 8192 [ 381.273288][ T5826] bond0 (unregistering): (slave 30): Releasing backup interface [ 381.281676][ T5826] : left allmulticast mode [ 381.286866][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.295713][ T5826] bond_slave_1: left allmulticast mode [ 381.301513][ T5826] bond0 (unregistering): Released all slaves [ 381.310008][ T5826] bond1 (unregistering): (slave veth7): Releasing active interface [ 381.318802][ T5826] bond1 (unregistering): Released all slaves [ 381.327284][ T5826] bond2 (unregistering): Released all slaves [ 381.335647][ T5826] bond3 (unregistering): Released all slaves [ 381.393379][ T5826] tipc: Left network mode [ 381.406456][ T5826] hsr_slave_0: left promiscuous mode [ 381.412961][ T5826] hsr_slave_1: left promiscuous mode [ 381.573755][T29169] chnl_net:caif_netlink_parms(): no params data found [ 381.626180][T29208] __nla_validate_parse: 7 callbacks suppressed [ 381.626196][T29208] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10428'. [ 381.684065][T29169] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.691323][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.708243][T29169] bridge_slave_0: entered allmulticast mode [ 381.723203][T29169] bridge_slave_0: entered promiscuous mode [ 381.736921][T29169] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.744077][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.752919][T29169] bridge_slave_1: entered allmulticast mode [ 381.760007][T29169] bridge_slave_1: entered promiscuous mode [ 381.788956][T29169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.801129][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10432'. [ 381.811944][T29169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.836684][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10432'. [ 381.860101][T29169] team0: Port device team_slave_0 added [ 381.872639][T29169] team0: Port device team_slave_1 added [ 381.883257][ T5826] IPVS: stop unused estimator thread 0... [ 381.924627][T29169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.931746][T29169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.957911][T29169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.980623][T29169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.987760][T29169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.013950][T29169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.117005][T29169] hsr_slave_0: entered promiscuous mode [ 382.133094][T29169] hsr_slave_1: entered promiscuous mode [ 382.319251][T29169] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.329240][T29169] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.357641][T29259] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 382.373510][T29169] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.383347][T29169] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.452948][T29169] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.463119][T29169] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.513183][T29169] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.523008][T29169] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.712729][T29169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.722734][T29169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.737549][T29169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.754924][T29169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.810625][T29169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.820619][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 382.820636][ T29] audit: type=1326 audit(1750725039.401:21675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 382.855475][T29169] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.867923][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.875053][ T5824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.883313][ T29] audit: type=1326 audit(1750725039.401:21676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 382.907095][ T29] audit: type=1326 audit(1750725039.411:21677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 382.930887][ T29] audit: type=1326 audit(1750725039.411:21678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 382.954734][ T29] audit: type=1326 audit(1750725039.411:21679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 382.978710][ T29] audit: type=1326 audit(1750725039.411:21680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 383.002497][ T29] audit: type=1326 audit(1750725039.411:21681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 383.026327][ T29] audit: type=1326 audit(1750725039.411:21682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 383.050061][ T29] audit: type=1326 audit(1750725039.411:21683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 383.073775][ T29] audit: type=1326 audit(1750725039.411:21684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.3.10466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 383.104395][T29301] dummy0: entered promiscuous mode [ 383.123549][T29301] dummy0: left promiscuous mode [ 383.172246][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.179360][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.198640][T29169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.209082][T29169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.279789][T29169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.346139][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10472'. [ 383.504331][T29169] veth0_vlan: entered promiscuous mode [ 383.513437][T29169] veth1_vlan: entered promiscuous mode [ 383.547495][T29169] veth0_macvtap: entered promiscuous mode [ 383.560873][T29169] veth1_macvtap: entered promiscuous mode [ 383.577381][T29169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.590033][T29169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.642989][T29169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.651807][T29169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.660553][T29169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.669641][T29169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.695165][T29322] lo speed is unknown, defaulting to 1000 [ 383.705180][T29322] lo speed is unknown, defaulting to 1000 [ 383.865032][T29370] loop6: detected capacity change from 0 to 128 [ 383.886314][T29370] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.926319][T29370] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.964754][T29370] ./file0: Can't lookup blockdev [ 384.028544][T29169] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.721868][T29419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.018245][T29438] loop6: detected capacity change from 0 to 2048 [ 385.092097][T29438] loop6: p1 < > p4 [ 385.096483][T29438] loop6: p4 size 8388608 extends beyond EOD, truncated [ 385.142462][T29441] loop6: detected capacity change from 0 to 2048 [ 385.164084][T29441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.290832][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.328795][T29453] wg2: entered promiscuous mode [ 385.333787][T29453] wg2: entered allmulticast mode [ 385.497709][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10526'. [ 385.511949][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10526'. [ 385.536228][T29466] netlink: zone id is out of range [ 385.541558][T29466] netlink: zone id is out of range [ 385.546902][T29466] netlink: zone id is out of range [ 385.552188][T29466] netlink: zone id is out of range [ 385.557468][T29466] netlink: zone id is out of range [ 385.606742][T29468] loop2: detected capacity change from 0 to 1024 [ 385.614253][T29468] EXT4-fs: Ignoring removed nobh option [ 385.620055][T29468] EXT4-fs: Ignoring removed bh option [ 385.646510][T29468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.706377][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.797857][T29485] xt_hashlimit: size too large, truncated to 1048576 [ 385.897172][T29493] loop2: detected capacity change from 0 to 512 [ 385.904955][T29493] EXT4-fs: Ignoring removed bh option [ 385.910923][T29493] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.920054][T29493] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 385.945959][T29493] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 385.985857][T29493] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 385.997061][T29493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.143538][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.174609][T29455] syz.6.10522 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 386.188949][T29455] CPU: 1 UID: 0 PID: 29455 Comm: syz.6.10522 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 386.189010][T29455] Tainted: [W]=WARN [ 386.189018][T29455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.189034][T29455] Call Trace: [ 386.189042][T29455] [ 386.189051][T29455] __dump_stack+0x1d/0x30 [ 386.189076][T29455] dump_stack_lvl+0xe8/0x140 [ 386.189116][T29455] dump_stack+0x15/0x1b [ 386.189132][T29455] dump_header+0x81/0x220 [ 386.189169][T29455] oom_kill_process+0x334/0x3f0 [ 386.189205][T29455] out_of_memory+0x979/0xb80 [ 386.189255][T29455] try_charge_memcg+0x5e6/0x9e0 [ 386.189289][T29455] obj_cgroup_charge_pages+0xa6/0x150 [ 386.189406][T29455] __memcg_kmem_charge_page+0x9f/0x170 [ 386.189441][T29455] __alloc_frozen_pages_noprof+0x188/0x360 [ 386.189558][T29455] alloc_pages_mpol+0xb3/0x250 [ 386.189667][T29455] alloc_pages_noprof+0x90/0x130 [ 386.189703][T29455] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 386.189756][T29455] __kvmalloc_node_noprof+0x30f/0x4e0 [ 386.189803][T29455] ? ip_set_alloc+0x1f/0x30 [ 386.189836][T29455] ? ip_set_alloc+0x1f/0x30 [ 386.189869][T29455] ? __kmalloc_cache_noprof+0x189/0x320 [ 386.189922][T29455] ip_set_alloc+0x1f/0x30 [ 386.189950][T29455] hash_netiface_create+0x282/0x740 [ 386.189982][T29455] ? __pfx_hash_netiface_create+0x10/0x10 [ 386.190071][T29455] ip_set_create+0x3c9/0x960 [ 386.190110][T29455] ? save_fpregs_to_fpstate+0x100/0x160 [ 386.190151][T29455] nfnetlink_rcv_msg+0x4c3/0x590 [ 386.190205][T29455] ? selinux_capable+0x1f9/0x270 [ 386.190243][T29455] netlink_rcv_skb+0x120/0x220 [ 386.190349][T29455] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 386.190387][T29455] nfnetlink_rcv+0x16b/0x1690 [ 386.190417][T29455] ? __kfree_skb+0x109/0x150 [ 386.190531][T29455] ? nlmon_xmit+0x4f/0x60 [ 386.190553][T29455] ? consume_skb+0x49/0x150 [ 386.190662][T29455] ? nlmon_xmit+0x4f/0x60 [ 386.190687][T29455] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 386.190729][T29455] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 386.190777][T29455] ? __dev_queue_xmit+0x182/0x1fb0 [ 386.190818][T29455] ? ref_tracker_free+0x37d/0x3e0 [ 386.190862][T29455] ? __netlink_deliver_tap+0x4dc/0x500 [ 386.190908][T29455] netlink_unicast+0x59e/0x670 [ 386.190942][T29455] netlink_sendmsg+0x58b/0x6b0 [ 386.190967][T29455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.190996][T29455] __sock_sendmsg+0x142/0x180 [ 386.191079][T29455] ____sys_sendmsg+0x31e/0x4e0 [ 386.191122][T29455] ___sys_sendmsg+0x17b/0x1d0 [ 386.191253][T29455] __x64_sys_sendmsg+0xd4/0x160 [ 386.191294][T29455] x64_sys_call+0x2999/0x2fb0 [ 386.191315][T29455] do_syscall_64+0xd2/0x200 [ 386.191335][T29455] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 386.191417][T29455] ? clear_bhb_loop+0x40/0x90 [ 386.191446][T29455] ? clear_bhb_loop+0x40/0x90 [ 386.191476][T29455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.191504][T29455] RIP: 0033:0x7f839d0ee929 [ 386.191521][T29455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.191587][T29455] RSP: 002b:00007f839b757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.191613][T29455] RAX: ffffffffffffffda RBX: 00007f839d315fa0 RCX: 00007f839d0ee929 [ 386.191627][T29455] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.191639][T29455] RBP: 00007f839d170b39 R08: 0000000000000000 R09: 0000000000000000 [ 386.191651][T29455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.191664][T29455] R13: 0000000000000000 R14: 00007f839d315fa0 R15: 00007ffe03ffcdc8 [ 386.191691][T29455] [ 386.544215][T29455] memory: usage 307200kB, limit 307200kB, failcnt 146 [ 386.551107][T29455] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 386.559077][T29455] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 386.566492][T29455] Memory cgroup stats for /syz6: [ 386.588527][T29455] cache 0 [ 386.596677][T29455] rss 0 [ 386.599525][T29455] shmem 0 [ 386.602733][T29455] mapped_file 0 [ 386.606299][T29455] dirty 0 [ 386.609277][T29455] writeback 0 [ 386.612607][T29455] workingset_refault_anon 22 [ 386.617216][T29455] workingset_refault_file 0 [ 386.621790][T29455] swap 172032 [ 386.625143][T29455] swapcached 24576 [ 386.628947][T29455] pgpgin 126890 [ 386.632463][T29455] pgpgout 126884 [ 386.636118][T29455] pgfault 173252 [ 386.639683][T29455] pgmajfault 12 [ 386.643207][T29455] inactive_anon 20480 [ 386.647222][T29455] active_anon 4096 [ 386.651044][T29455] inactive_file 0 [ 386.654784][T29455] active_file 0 [ 386.658274][T29455] unevictable 0 [ 386.661809][T29455] hierarchical_memory_limit 314572800 [ 386.667208][T29455] hierarchical_memsw_limit 9223372036854771712 [ 386.673452][T29455] total_cache 0 [ 386.676951][T29455] total_rss 0 [ 386.680255][T29455] total_shmem 0 [ 386.683848][T29455] total_mapped_file 0 [ 386.687906][T29455] total_dirty 0 [ 386.691501][T29455] total_writeback 0 [ 386.695379][T29455] total_workingset_refault_anon 22 [ 386.700507][T29455] total_workingset_refault_file 0 [ 386.701552][T29512] netlink: 'syz.0.10545': attribute type 10 has an invalid length. [ 386.705577][T29455] total_swap 172032 [ 386.705589][T29455] total_swapcached 24576 [ 386.705597][T29455] total_pgpgin 126890 [ 386.705607][T29455] total_pgpgout 126884 [ 386.729724][T29455] total_pgfault 173253 [ 386.733845][T29455] total_pgmajfault 12 [ 386.737844][T29455] total_inactive_anon 20480 [ 386.742372][T29455] total_active_anon 4096 [ 386.746611][T29455] total_inactive_file 0 [ 386.750788][T29455] total_active_file 0 [ 386.754813][T29455] total_unevictable 0 [ 386.758907][T29455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.10522,pid=29454,uid=0 [ 386.765490][T29513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10545'. [ 386.773762][T29455] Memory cgroup out of memory: Killed process 29454 (syz.6.10522) total-vm:95800kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 386.817176][T29512] bridge0: entered allmulticast mode [ 386.932150][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10548'. [ 386.941276][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10548'. [ 387.005303][T29529] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10553'. [ 387.210062][T29562] loop2: detected capacity change from 0 to 1024 [ 387.242448][T29562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.268153][T29562] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 387.280635][T29562] EXT4-fs (loop2): This should not happen!! Data will be lost [ 387.280635][T29562] [ 387.290416][T29562] EXT4-fs (loop2): Total free blocks count 0 [ 387.296474][T29562] EXT4-fs (loop2): Free/Dirty block details [ 387.302423][T29562] EXT4-fs (loop2): free_blocks=0 [ 387.307395][T29562] EXT4-fs (loop2): dirty_blocks=0 [ 387.312526][T29562] EXT4-fs (loop2): Block reservation details [ 387.318629][T29562] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 387.340606][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.360555][T29580] 9pnet: p9_errstr2errno: server reported unknown error [ 387.377536][T29582] loop6: detected capacity change from 0 to 128 [ 387.480451][T29582] syz.6.10574: attempt to access beyond end of device [ 387.480451][T29582] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 387.494415][T29582] syz.6.10574: attempt to access beyond end of device [ 387.494415][T29582] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 387.508495][T29582] syz.6.10574: attempt to access beyond end of device [ 387.508495][T29582] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 387.522487][T29582] syz.6.10574: attempt to access beyond end of device [ 387.522487][T29582] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 387.537110][T29582] syz.6.10574: attempt to access beyond end of device [ 387.537110][T29582] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 387.551290][T29582] syz.6.10574: attempt to access beyond end of device [ 387.551290][T29582] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 387.572212][T29582] syz.6.10574: attempt to access beyond end of device [ 387.572212][T29582] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 387.589614][T29600] netlink: 'syz.2.10581': attribute type 7 has an invalid length. [ 387.590404][T29582] syz.6.10574: attempt to access beyond end of device [ 387.590404][T29582] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 387.597517][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10581'. [ 387.611293][T29582] syz.6.10574: attempt to access beyond end of device [ 387.611293][T29582] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 387.634254][T29582] syz.6.10574: attempt to access beyond end of device [ 387.634254][T29582] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 387.698939][T29604] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 387.732453][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10586'. [ 387.873544][T29632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.882787][T29632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.154475][T29651] loop6: detected capacity change from 0 to 512 [ 388.162258][T29651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.183600][T29651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.196558][T29651] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.308668][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 388.308688][ T29] audit: type=1400 audit(1750725044.891:21778): avc: denied { ioctl } for pid=29650 comm="syz.6.10604" path="/22/bus/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 388.377241][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.469360][T29677] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.10610'. [ 388.469589][T29675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.478740][T29677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10610'. [ 388.486700][T29675] bridge0: port 1(bond5) entered blocking state [ 388.500757][T29675] bridge0: port 1(bond5) entered disabled state [ 388.507293][T29675] bond5: entered allmulticast mode [ 388.514448][T29675] bond5: entered promiscuous mode [ 388.869680][T29703] ip6gre1: entered allmulticast mode [ 389.270795][T29733] lo speed is unknown, defaulting to 1000 [ 389.277185][T29733] lo speed is unknown, defaulting to 1000 [ 389.305858][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10644'. [ 389.363039][T29745] loop2: detected capacity change from 0 to 1024 [ 389.383855][T29745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.404683][T29745] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 389.417129][T29745] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.417129][T29745] [ 389.426888][T29745] EXT4-fs (loop2): Total free blocks count 0 [ 389.432935][T29745] EXT4-fs (loop2): Free/Dirty block details [ 389.438844][T29745] EXT4-fs (loop2): free_blocks=0 [ 389.443866][T29745] EXT4-fs (loop2): dirty_blocks=0 [ 389.448905][T29745] EXT4-fs (loop2): Block reservation details [ 389.454933][T29745] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 389.508514][ T29] audit: type=1326 audit(1750725046.091:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71964e929 code=0x7ffc0000 [ 389.511403][T23418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.534845][ T29] audit: type=1326 audit(1750725046.091:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71964e929 code=0x7ffc0000 [ 389.574381][ T29] audit: type=1326 audit(1750725046.131:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff71964e929 code=0x7ffc0000 [ 389.598236][ T29] audit: type=1326 audit(1750725046.131:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff71964e963 code=0x7ffc0000 [ 389.622010][ T29] audit: type=1326 audit(1750725046.131:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff71964d3df code=0x7ffc0000 [ 389.645849][ T29] audit: type=1326 audit(1750725046.131:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff71964e9b7 code=0x7ffc0000 [ 389.670790][ T29] audit: type=1326 audit(1750725046.161:21785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71964d290 code=0x7ffc0000 [ 389.694560][ T29] audit: type=1326 audit(1750725046.161:21786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff71964d58a code=0x7ffc0000 [ 389.718104][ T29] audit: type=1326 audit(1750725046.161:21787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29753 comm="syz.4.10648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71964e929 code=0x7ffc0000 [ 389.788709][T29767] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 390.145519][T29772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10658'. [ 390.244820][T29792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29792 comm=syz.6.10666 [ 390.294414][T29798] loop7: detected capacity change from 0 to 16384 [ 390.411974][T29805] vlan0: entered allmulticast mode [ 390.727804][T29846] loop6: detected capacity change from 0 to 1024 [ 390.735361][T29846] ext4: Unknown parameter 'uid<00000000000000000000' [ 390.740677][T29840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.795481][T29840] bond2 (unregistering): Released all slaves [ 390.909124][T29862] loop6: detected capacity change from 0 to 512 [ 390.916389][T29862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.935971][T29862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.949143][T29862] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.991135][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.243992][T29902] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.252347][T29902] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.260556][T29902] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.268899][T29902] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.279454][T29902] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.288002][T29902] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.296560][T29902] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.305119][T29902] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.497386][T29921] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 391.540120][T29924] pim6reg1: entered promiscuous mode [ 391.545538][T29924] pim6reg1: entered allmulticast mode [ 391.595807][T29929] netlink: 'syz.3.10723': attribute type 13 has an invalid length. [ 391.631745][T12690] lo speed is unknown, defaulting to 1000 [ 391.637546][T12690] syz2: Port: 1 Link DOWN [ 391.713117][T29938] veth0: entered promiscuous mode [ 391.721150][T29938] veth0 (unregistering): left promiscuous mode [ 391.744569][T29942] loop6: detected capacity change from 0 to 512 [ 391.773561][T29942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.786280][T29942] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.811258][T29942] lo speed is unknown, defaulting to 1000 [ 391.817275][T29942] lo speed is unknown, defaulting to 1000 [ 391.869194][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.959371][T29961] netlink: 'syz.2.10736': attribute type 13 has an invalid length. [ 392.339731][T29970] __nla_validate_parse: 6 callbacks suppressed [ 392.339750][T29970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10749'. [ 392.350923][T29961] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.363694][T29961] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.372286][T29961] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.380643][T29961] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.549014][T29983] netlink: 'syz.6.10745': attribute type 21 has an invalid length. [ 392.559691][T29983] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10745'. [ 392.913820][T30000] loop6: detected capacity change from 0 to 512 [ 392.935536][T30000] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 392.954137][T30000] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.10752: bad orphan inode 15 [ 392.968828][T30000] ext4_test_bit(bit=14, block=18) = 1 [ 392.974395][T30000] is_bad_inode(inode)=0 [ 392.978590][T30000] NEXT_ORPHAN(inode)=1023 [ 392.982990][T30000] max_ino=32 [ 392.986210][T30000] i_nlink=0 [ 392.999788][T30000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 393.015567][T30000] ext2 filesystem being mounted at /52/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 393.017991][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10755'. [ 393.052991][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 393.086603][T30014] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 393.109988][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10759'. [ 393.164213][T30024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10763'. [ 393.166696][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10764'. [ 393.263573][T30037] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10769'. [ 393.277608][T30041] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 393.387711][T30057] netlink: 'syz.4.10778': attribute type 10 has an invalid length. [ 393.400838][T30059] loop6: detected capacity change from 0 to 512 [ 393.425670][T30057] bridge0: entered allmulticast mode [ 393.431967][T30057] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 393.447420][T30057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10778'. [ 393.454353][T30059] __quota_error: 105 callbacks suppressed [ 393.454377][T30059] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 393.472651][T30059] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 393.482721][T30059] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.10779: Failed to acquire dquot type 1 [ 393.495928][T30059] EXT4-fs (loop6): 1 truncate cleaned up [ 393.502306][T30059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.502370][T30057] bond0: (slave bridge0): Releasing backup interface [ 393.521789][T30059] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.523445][T30057] bridge0 (unregistering): left allmulticast mode [ 393.569420][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.590526][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10786'. [ 393.602038][T30073] syz_tun: entered allmulticast mode [ 393.608065][T30072] syz_tun: left allmulticast mode [ 393.672007][ T29] audit: type=1400 audit(1750725050.261:21893): avc: denied { wake_alarm } for pid=30083 comm="syz.6.10798" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 393.702296][T30085] netlink: 'syz.2.10788': attribute type 21 has an invalid length. [ 393.713594][T30085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10788'. [ 393.741225][T30089] loop6: detected capacity change from 0 to 1024 [ 393.978798][ T29] audit: type=1326 audit(1750725050.561:21894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.002619][ T29] audit: type=1326 audit(1750725050.561:21895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.026411][ T29] audit: type=1326 audit(1750725050.561:21896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.050304][ T29] audit: type=1326 audit(1750725050.561:21897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.074178][ T29] audit: type=1326 audit(1750725050.561:21898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.097848][ T29] audit: type=1326 audit(1750725050.561:21899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.121437][ T29] audit: type=1326 audit(1750725050.561:21900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30096 comm="syz.3.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 394.646412][T30132] netlink: 'syz.3.10811': attribute type 4 has an invalid length. [ 394.656081][T30132] netlink: 'syz.3.10811': attribute type 4 has an invalid length. [ 394.666285][T12686] lo speed is unknown, defaulting to 1000 [ 394.672119][T12686] syz2: Port: 1 Link ACTIVE [ 394.688794][T30136] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 394.991674][T30167] wireguard0: entered promiscuous mode [ 394.997734][T30167] wireguard0: entered allmulticast mode [ 395.336560][T30188] lo speed is unknown, defaulting to 1000 [ 395.342748][T30188] lo speed is unknown, defaulting to 1000 [ 395.565157][T30209] netlink: 'syz.2.10841': attribute type 10 has an invalid length. [ 395.587702][T30209] bridge0: entered allmulticast mode [ 395.598457][T30209] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 395.611853][T30209] bridge_slave_1: left allmulticast mode [ 395.617696][T30209] bridge_slave_1: left promiscuous mode [ 395.623539][T30209] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.632393][T30209] bridge_slave_0: left promiscuous mode [ 395.638203][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.676323][T30209] bond0: (slave bridge0): Releasing backup interface [ 395.684980][T30209] bridge0 (unregistering): left allmulticast mode [ 395.776968][T30226] tipc: Started in network mode [ 395.781944][T30226] tipc: Node identity ac14140f, cluster identity 4711 [ 395.788931][T30226] tipc: New replicast peer: 255.255.255.255 [ 395.794978][T30226] tipc: Enabled bearer , priority 10 [ 396.910498][T12690] tipc: Node number set to 2886997007 [ 397.090962][T30266] tipc: Started in network mode [ 397.096159][T30266] tipc: Node identity ac14140f, cluster identity 4711 [ 397.121442][T30266] tipc: New replicast peer: 255.255.255.255 [ 397.127578][T30266] tipc: Enabled bearer , priority 10 [ 397.446155][T30309] __nla_validate_parse: 8 callbacks suppressed [ 397.446244][T30309] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10884'. [ 397.465437][T30305] xt_CT: No such helper "netbios-ns" [ 397.627616][T30320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30320 comm=syz.2.10888 [ 397.790533][ C0] EXT4-fs (loop4): error count since last fsck: 5 [ 397.797065][ C0] EXT4-fs (loop4): last error at time 1750724751: ext4_lookup:1791: inode 2 [ 397.887522][T30341] netlink: 'syz.6.10898': attribute type 13 has an invalid length. [ 398.260075][T12673] tipc: Node number set to 2886997007 [ 398.368193][T30341] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.375545][T30341] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.413500][T30370] netlink: 'syz.3.10907': attribute type 7 has an invalid length. [ 398.421451][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10907'. [ 398.557269][T30341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.571252][T30341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.623186][T30341] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.632314][T30341] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.641364][T30341] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.650281][T30341] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.842554][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 398.842611][ T29] audit: type=1400 audit(1750726081.440:21978): avc: denied { write } for pid=30380 comm="syz.6.10913" name="kcm" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 398.901229][T30387] lo speed is unknown, defaulting to 1000 [ 398.907543][T30387] lo speed is unknown, defaulting to 1000 [ 399.284954][T30418] 9pnet: p9_errstr2errno: server reported unknown error [ 399.343339][T30425] lo speed is unknown, defaulting to 1000 [ 399.349899][T30425] lo speed is unknown, defaulting to 1000 [ 399.548535][ T29] audit: type=1400 audit(1750726082.140:21979): avc: denied { listen } for pid=30448 comm="syz.4.10943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.689023][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10948'. [ 399.749042][T30466] netlink: 'syz.0.10950': attribute type 13 has an invalid length. [ 399.838895][T30466] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.847310][T30466] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.856123][T30466] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.864842][T30466] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.932927][T30476] 9pnet: p9_errstr2errno: server reported unknown error [ 399.969234][T30479] tipc: New replicast peer: 255.255.255.83 [ 399.975602][T30479] tipc: Enabled bearer , priority 10 [ 400.020467][ T29] audit: type=1400 audit(1750726082.620:21980): avc: denied { write } for pid=30482 comm="syz.0.10956" path="socket:[97356]" dev="sockfs" ino=97356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 400.067930][ T29] audit: type=1326 audit(1750726082.660:21981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.092679][ T29] audit: type=1326 audit(1750726082.660:21982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.103389][T30487] lo speed is unknown, defaulting to 1000 [ 400.116720][ T29] audit: type=1326 audit(1750726082.660:21983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.146018][ T29] audit: type=1326 audit(1750726082.670:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.147770][T30487] lo speed is unknown, defaulting to 1000 [ 400.169863][ T29] audit: type=1326 audit(1750726082.670:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.169900][ T29] audit: type=1326 audit(1750726082.670:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.169975][ T29] audit: type=1326 audit(1750726082.670:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30485 comm="syz.3.10957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 400.276599][T30491] 9pnet: p9_errstr2errno: server reported unknown error [ 400.480176][T30508] netlink: 'syz.0.10968': attribute type 1 has an invalid length. [ 400.495396][T30508] bond3: entered promiscuous mode [ 400.502298][T30508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.516227][T30508] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10968'. [ 400.529635][T30508] batadv0: entered promiscuous mode [ 400.534948][T30508] batadv0: entered allmulticast mode [ 400.544760][T30508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.554267][T30508] bond3: (slave batadv0): making interface the new active one [ 400.564238][T30508] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 400.626159][T30508] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10968'. [ 400.669917][T30508] batadv1: entered promiscuous mode [ 400.675315][T30508] batadv1: entered allmulticast mode [ 400.683702][T30508] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 400.692395][T30508] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 401.316449][T30540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.324890][T30540] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.333323][T30540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.341797][T30540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.367311][T30544] lo speed is unknown, defaulting to 1000 [ 401.375813][T30544] lo speed is unknown, defaulting to 1000 [ 401.507105][T30562] lo speed is unknown, defaulting to 1000 [ 401.513855][T30562] lo speed is unknown, defaulting to 1000 [ 401.622173][T30572] lo speed is unknown, defaulting to 1000 [ 402.284301][T30616] wg2: left promiscuous mode [ 402.288974][T30616] wg2: left allmulticast mode [ 402.329257][T30616] wg2: entered promiscuous mode [ 402.334370][T30616] wg2: entered allmulticast mode [ 402.353059][T30619] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.11011'. [ 402.533513][T30633] vcan0: entered allmulticast mode [ 402.541844][T30633] vcan0: left allmulticast mode [ 402.549218][T30635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11020'. [ 402.568474][T30635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.599355][T30635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.743314][ T3452] tipc: Subscription rejected, illegal request [ 402.769201][T30663] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11033'. [ 403.659742][T30708] netlink: 'syz.0.11052': attribute type 1 has an invalid length. [ 403.711781][T30706] lo speed is unknown, defaulting to 1000 [ 403.739402][T30708] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 403.751910][T30706] lo speed is unknown, defaulting to 1000 [ 403.900188][T30688] 9pnet_fd: p9_fd_create_tcp (30688): problem connecting socket to 127.0.0.1 [ 404.009475][T30730] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 404.063614][T30737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11064'. [ 404.098459][T30742] sch_fq: defrate 0 ignored. [ 404.141936][T30749] loop6: detected capacity change from 0 to 512 [ 404.148630][T30749] EXT4-fs: Ignoring removed i_version option [ 404.156112][T30749] EXT4-fs (loop6): orphan cleanup on readonly fs [ 404.164155][T30749] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11069: bg 0: block 131: padding at end of block bitmap is not set [ 404.179198][T30749] EXT4-fs (loop6): Remounting filesystem read-only [ 404.186901][T30749] EXT4-fs (loop6): 1 truncate cleaned up [ 404.193519][T30749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.211317][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 404.211331][ T29] audit: type=1400 audit(1750726086.810:22045): avc: denied { watch watch_reads } for pid=30748 comm="syz.6.11069" path="/118/file0" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.304687][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.347421][T30763] 9pnet: p9_errstr2errno: server reported unknown error [ 404.396832][T30769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11077'. [ 404.435139][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11079'. [ 404.475085][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11079'. [ 405.230517][T30821] loop6: detected capacity change from 0 to 2048 [ 405.593795][T30821] Alternate GPT is invalid, using primary GPT. [ 405.600229][T30821] loop6: p1 p2 p3 [ 405.796837][T30836] lo speed is unknown, defaulting to 1000 [ 405.810152][T30836] lo speed is unknown, defaulting to 1000 [ 406.251145][T30850] 9pnet: p9_errstr2errno: server reported unknown error [ 406.340891][T30865] lo speed is unknown, defaulting to 1000 [ 406.347230][T30865] lo speed is unknown, defaulting to 1000 [ 406.608213][T30881] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11121'. [ 406.617546][T30881] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11121'. [ 406.626841][T30881] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11121'. [ 406.747650][T30895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11125'. [ 407.132809][T30929] netlink: 'syz.4.11144': attribute type 1 has an invalid length. [ 407.165643][T30929] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.213863][T30929] vlan0: entered allmulticast mode [ 407.219086][T30929] bond8: entered allmulticast mode [ 407.316996][T30939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30939 comm=syz.6.11147 [ 407.710225][T30968] __nla_validate_parse: 1 callbacks suppressed [ 407.710244][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11161'. [ 407.748854][ T29] audit: type=1326 audit(1750726090.340:22046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.772696][ T29] audit: type=1326 audit(1750726090.340:22047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.796545][ T29] audit: type=1326 audit(1750726090.340:22048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.820441][ T29] audit: type=1326 audit(1750726090.340:22049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.844123][ T29] audit: type=1326 audit(1750726090.340:22050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.867859][ T29] audit: type=1326 audit(1750726090.340:22051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.891651][ T29] audit: type=1326 audit(1750726090.340:22052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.915556][ T29] audit: type=1326 audit(1750726090.340:22053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 407.939415][ T29] audit: type=1326 audit(1750726090.340:22054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.6.11163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 408.051243][T30987] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11168'. [ 408.115207][T30994] loop6: detected capacity change from 0 to 256 [ 408.131422][T30994] FAT-fs (loop6): bogus number of FAT sectors [ 408.137571][T30994] FAT-fs (loop6): Can't find a valid FAT filesystem [ 408.145723][T30999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11173'. [ 408.181024][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11175'. [ 408.220067][T31003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11175'. [ 408.236569][T31003] netlink: 2 bytes leftover after parsing attributes in process `syz.6.11175'. [ 408.380780][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11181'. [ 408.457776][T31012] lo speed is unknown, defaulting to 1000 [ 408.495657][T31012] lo speed is unknown, defaulting to 1000 [ 408.743579][T31045] netlink: 'syz.6.11192': attribute type 4 has an invalid length. [ 408.975343][T31049] lo speed is unknown, defaulting to 1000 [ 408.992509][T31049] lo speed is unknown, defaulting to 1000 [ 409.099533][T31057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11195'. [ 409.108975][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11195'. [ 409.309998][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 409.310016][ T29] audit: type=1326 audit(1750726091.900:22064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.354382][ T29] audit: type=1326 audit(1750726091.900:22065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.378184][ T29] audit: type=1326 audit(1750726091.930:22066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.401940][ T29] audit: type=1326 audit(1750726091.930:22067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.425973][ T29] audit: type=1326 audit(1750726091.930:22068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.449749][ T29] audit: type=1326 audit(1750726091.930:22069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.473613][ T29] audit: type=1326 audit(1750726091.930:22070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.497430][ T29] audit: type=1326 audit(1750726091.930:22071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.521159][ T29] audit: type=1326 audit(1750726091.930:22072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.544945][ T29] audit: type=1326 audit(1750726091.930:22073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.3.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f9a98b9e929 code=0x7ffc0000 [ 409.847895][T31108] wireguard0: entered promiscuous mode [ 409.853478][T31108] wireguard0: entered allmulticast mode [ 410.451983][T31157] loop6: detected capacity change from 0 to 1024 [ 410.461423][T31157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.477881][T31157] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 410.501054][T31157] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 410.513533][T31157] EXT4-fs (loop6): This should not happen!! Data will be lost [ 410.513533][T31157] [ 410.523215][T31157] EXT4-fs (loop6): Total free blocks count 0 [ 410.529217][T31157] EXT4-fs (loop6): Free/Dirty block details [ 410.535176][T31157] EXT4-fs (loop6): free_blocks=16 [ 410.540351][T31157] EXT4-fs (loop6): dirty_blocks=0 [ 410.545404][T31157] EXT4-fs (loop6): Block reservation details [ 410.551489][T31157] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 410.575818][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.782164][T31168] loop6: detected capacity change from 0 to 512 [ 410.812310][T31168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.825562][T31168] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.840843][T31168] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11238: corrupted inode contents [ 410.853337][T31168] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11238: mark_inode_dirty error [ 410.866333][T31168] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11238: corrupted inode contents [ 410.881775][T31168] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11238: corrupted inode contents [ 410.919378][T31168] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11238: mark_inode_dirty error [ 410.946530][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11243'. [ 410.955697][T31179] netlink: 'syz.4.11243': attribute type 30 has an invalid length. [ 410.965268][T31168] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11238: corrupted inode contents [ 410.977941][T31179] netlink: 'syz.4.11243': attribute type 30 has an invalid length. [ 410.993958][T31168] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.11238: mark_inode_dirty error [ 411.014778][T31168] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11238: corrupted inode contents [ 411.031896][T31168] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11238: mark_inode_dirty error [ 411.083707][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.797804][T31243] wireguard1: entered promiscuous mode [ 411.803468][T31243] wireguard1: entered allmulticast mode [ 412.059215][T31282] loop6: detected capacity change from 0 to 512 [ 412.072851][T31282] EXT4-fs: Ignoring removed bh option [ 412.088095][T31282] EXT4-fs: quotafile must be on filesystem root [ 412.860890][T31308] lo speed is unknown, defaulting to 1000 [ 412.872172][T31308] lo speed is unknown, defaulting to 1000 [ 413.088286][T31323] netlink: 'syz.0.11304': attribute type 10 has an invalid length. [ 413.096358][T31323] __nla_validate_parse: 2 callbacks suppressed [ 413.096372][T31323] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11304'. [ 413.223999][T31335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11309'. [ 413.255293][T31339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11299'. [ 413.304351][T31345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11313'. [ 413.326744][T31345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11313'. [ 413.339137][T31347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11314'. [ 413.687049][T31378] wireguard1: entered promiscuous mode [ 413.692821][T31378] wireguard1: entered allmulticast mode [ 413.693992][T31386] netlink: 'syz.6.11329': attribute type 21 has an invalid length. [ 413.707620][T31386] netlink: 156 bytes leftover after parsing attributes in process `syz.6.11329'. [ 413.882028][T31397] lo speed is unknown, defaulting to 1000 [ 413.898234][T31397] lo speed is unknown, defaulting to 1000 [ 413.915824][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11336'. [ 414.274512][T31421] xt_hashlimit: max too large, truncated to 1048576 [ 414.442414][T31440] lo speed is unknown, defaulting to 1000 [ 414.448551][T31440] lo speed is unknown, defaulting to 1000 [ 414.498628][T31444] 9pnet: p9_errstr2errno: server reported unknown error [ 414.546431][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 414.546446][ T29] audit: type=1326 audit(1750726097.130:22149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.582388][ T29] audit: type=1326 audit(1750726097.170:22150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.606248][ T29] audit: type=1326 audit(1750726097.170:22151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.630046][ T29] audit: type=1326 audit(1750726097.170:22152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.653824][ T29] audit: type=1326 audit(1750726097.170:22153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.677563][ T29] audit: type=1326 audit(1750726097.170:22154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.701452][ T29] audit: type=1326 audit(1750726097.170:22155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.725360][ T29] audit: type=1326 audit(1750726097.170:22156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.748964][ T29] audit: type=1326 audit(1750726097.170:22157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.772809][ T29] audit: type=1326 audit(1750726097.170:22158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31450 comm="syz.2.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 414.878487][T31457] netlink: 'syz.4.11355': attribute type 21 has an invalid length. [ 414.888077][T31457] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11355'. [ 414.942052][T31468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11361'. [ 414.997321][T31470] lo speed is unknown, defaulting to 1000 [ 415.003424][T31470] lo speed is unknown, defaulting to 1000 [ 415.146938][T31463] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 415.262558][T31484] lo speed is unknown, defaulting to 1000 [ 415.268886][T31484] lo speed is unknown, defaulting to 1000 [ 415.643482][T31502] lo speed is unknown, defaulting to 1000 [ 415.685167][T31502] lo speed is unknown, defaulting to 1000 [ 415.765884][T31513] loop6: detected capacity change from 0 to 512 [ 415.794159][T31513] EXT4-fs: Ignoring removed i_version option [ 415.840417][T31513] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.11380: corrupted in-inode xattr: overlapping e_value [ 415.856296][T31513] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.11380: couldn't read orphan inode 15 (err -117) [ 415.884921][T31513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.913735][T31513] EXT4-fs error (device loop6): ext4_add_entry:2417: inode #2: comm syz.6.11380: Directory hole found for htree leaf block 0 [ 415.967586][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.216346][T31555] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 416.842078][T31570] loop6: detected capacity change from 0 to 128 [ 416.876283][T31570] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 417.124651][T31552] lo speed is unknown, defaulting to 1000 [ 417.161901][T31552] lo speed is unknown, defaulting to 1000 [ 417.466664][T31606] $Hÿ: renamed from bond0 [ 417.473065][T31606] $Hÿ: entered promiscuous mode [ 417.478158][T31606] bond_slave_0: entered promiscuous mode [ 417.484040][T31606] bond_slave_1: entered promiscuous mode [ 417.813390][T31635] lo speed is unknown, defaulting to 1000 [ 417.833741][T31635] lo speed is unknown, defaulting to 1000 [ 418.767828][T31683] 9pnet: p9_errstr2errno: server reported unknown error [ 419.129356][T31705] $Hÿ: renamed from bond0 [ 419.141989][T31705] $Hÿ: entered promiscuous mode [ 419.185725][T31707] lo speed is unknown, defaulting to 1000 [ 419.191913][T31707] lo speed is unknown, defaulting to 1000 [ 419.224013][T31709] loop6: detected capacity change from 0 to 512 [ 419.253579][T31709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.270179][T31709] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.313554][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.466378][T31735] __nla_validate_parse: 6 callbacks suppressed [ 419.466399][T31735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11471'. [ 419.482168][T31735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11471'. [ 419.491343][T31735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11471'. [ 419.502941][T31735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11471'. [ 419.512059][T31735] netlink: 'syz.0.11471': attribute type 6 has an invalid length. [ 419.734583][T31757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11478'. [ 419.768882][T31760] loop6: detected capacity change from 0 to 1024 [ 419.800620][T31760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.818072][T31765] netlink: 'syz.0.11484': attribute type 13 has an invalid length. [ 419.818832][T31760] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.11482: Allocating blocks 385-513 which overlap fs metadata [ 419.847168][T31760] EXT4-fs (loop6): pa ffff88810a01ca10: logic 16, phys. 129, len 24 [ 419.855290][T31760] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 419.872528][T31765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.882508][T31765] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.902112][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.911370][T31765] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 419.957856][T31777] loop6: detected capacity change from 0 to 512 [ 419.991587][T31777] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 420.018352][T31777] EXT4-fs (loop6): 1 truncate cleaned up [ 420.025475][T31777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.094494][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 420.094510][ T29] audit: type=1400 audit(1750726102.681:22218): avc: denied { map } for pid=31774 comm="syz.6.11487" path="/223/file2/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 420.163380][T31784] lo speed is unknown, defaulting to 1000 [ 420.204442][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.216230][T31784] lo speed is unknown, defaulting to 1000 [ 420.248446][T31793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11491'. [ 420.280907][T31793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11491'. [ 420.308484][T31793] netlink: 156 bytes leftover after parsing attributes in process `syz.6.11491'. [ 420.597779][T31819] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 420.611017][T31819] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 420.967993][T31850] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.020864][T31850] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.080741][T31850] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.131050][T31850] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.145287][ T29] audit: type=1326 audit(1750726103.741:22219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 421.169540][ T29] audit: type=1326 audit(1750726103.741:22220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 421.186451][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11518'. [ 421.193512][ T29] audit: type=1326 audit(1750726103.741:22221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 421.207985][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11518'. [ 421.225947][ T29] audit: type=1326 audit(1750726103.741:22222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 421.225980][ T29] audit: type=1326 audit(1750726103.741:22223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23d443e929 code=0x7ffc0000 [ 421.226006][ T29] audit: type=1326 audit(1750726103.741:22224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23d443e963 code=0x7ffc0000 [ 421.306176][ T29] audit: type=1326 audit(1750726103.741:22225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23d443d3df code=0x7ffc0000 [ 421.329772][ T29] audit: type=1326 audit(1750726103.741:22226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f23d443e9b7 code=0x7ffc0000 [ 421.353634][ T29] audit: type=1326 audit(1750726103.761:22227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.2.11518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23d443d290 code=0x7ffc0000 [ 421.407582][T31850] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.430087][T31850] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.442782][T31850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.459612][T31850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.324356][T31904] loop6: detected capacity change from 0 to 512 [ 422.351604][T31904] EXT4-fs (loop6): 1 orphan inode deleted [ 422.358023][T31904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.375026][ T5849] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 422.390248][T31904] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.465658][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.956784][T31962] bond0 (unregistering): Released all slaves [ 423.251747][T31979] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 423.331683][T31988] lo speed is unknown, defaulting to 1000 [ 423.337894][T31988] lo speed is unknown, defaulting to 1000 [ 423.456647][T31993] bridge: RTM_NEWNEIGH with invalid ether address [ 424.342467][T32034] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 424.442679][T32047] netlink: 'syz.6.11600': attribute type 2 has an invalid length. [ 424.450629][T32047] netlink: 'syz.6.11600': attribute type 8 has an invalid length. [ 424.473210][T32050] __nla_validate_parse: 9 callbacks suppressed [ 424.473229][T32050] netlink: 372 bytes leftover after parsing attributes in process `syz.2.11599'. [ 424.525722][T32055] bridge: RTM_NEWNEIGH with invalid ether address [ 424.604638][T32064] macsec1: entered allmulticast mode [ 424.610049][T32064] bridge0: entered allmulticast mode [ 424.624388][T32064] bridge0: port 3(macsec1) entered blocking state [ 424.631170][T32064] bridge0: port 3(macsec1) entered disabled state [ 424.649714][T32064] bridge0: left allmulticast mode [ 425.114190][T32087] loop6: detected capacity change from 0 to 1024 [ 425.128647][T32087] EXT4-fs: Ignoring removed bh option [ 425.144810][T32087] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 425.176234][T32089] netlink: 'syz.3.11619': attribute type 13 has an invalid length. [ 425.186064][T32087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.208607][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 425.208626][ T29] audit: type=1400 audit(1750726107.791:22385): avc: denied { remove_name } for pid=32086 comm="syz.6.11618" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.238468][ T29] audit: type=1400 audit(1750726107.791:22386): avc: denied { rename } for pid=32086 comm="syz.6.11618" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 425.273419][T32087] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.11618: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 425.312657][T32087] EXT4-fs (loop6): Remounting filesystem read-only [ 425.348051][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.387716][T12695] lo speed is unknown, defaulting to 1000 [ 425.393631][T12695] syz2: Port: 1 Link DOWN [ 425.417736][ T29] audit: type=1326 audit(1750726108.001:22387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.468608][ T29] audit: type=1326 audit(1750726108.001:22388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.470034][T32096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11621'. [ 425.492559][ T29] audit: type=1326 audit(1750726108.041:22389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.525281][ T29] audit: type=1326 audit(1750726108.041:22390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.549072][ T29] audit: type=1326 audit(1750726108.041:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.562963][T32096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11621'. [ 425.572935][ T29] audit: type=1326 audit(1750726108.041:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f839d0ee929 code=0x7ffc0000 [ 425.572976][ T29] audit: type=1326 audit(1750726108.041:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f839d0ee963 code=0x7ffc0000 [ 425.629246][ T29] audit: type=1326 audit(1750726108.041:22394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32093 comm="syz.6.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f839d0ee963 code=0x7ffc0000 [ 425.739923][T32109] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11626'. [ 425.797727][T32114] wg2: entered promiscuous mode [ 425.802880][T32114] wg2: entered allmulticast mode [ 426.084188][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11645'. [ 426.130326][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11645'. [ 426.225540][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11652'. [ 426.270864][T32169] macsec0: entered promiscuous mode [ 426.537967][T32193] vlan2: entered allmulticast mode [ 426.543289][T32193] dummy0: entered allmulticast mode [ 427.037751][T32252] loop6: detected capacity change from 0 to 512 [ 427.062470][T32252] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 427.081758][T32252] EXT4-fs (loop6): 1 truncate cleaned up [ 427.094323][T32252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.136809][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.938061][T32344] lo speed is unknown, defaulting to 1000 [ 427.944577][T32344] lo speed is unknown, defaulting to 1000 [ 428.277790][T32372] loop6: detected capacity change from 0 to 512 [ 428.308790][T32372] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.11739: iget: bad extended attribute block 1 [ 428.328988][T32372] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.11739: couldn't read orphan inode 15 (err -117) [ 428.372399][T32372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.473886][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.514852][T32380] loop6: detected capacity change from 0 to 128 [ 428.525221][T32380] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.949909][T32380] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 429.074191][T32386] siw: device registration error -23 [ 429.151299][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11750'. [ 429.162731][T32395] bridge_slave_0: default FDB implementation only supports local addresses [ 429.179332][T32395] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 429.289811][T32407] netlink: 'syz.6.11756': attribute type 13 has an invalid length. [ 429.341687][T32411] siw: device registration error -23 [ 429.382382][T32414] ref_ctr_offset mismatch. inode: 0x273a offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 429.436865][T32417] loop6: detected capacity change from 0 to 1024 [ 429.459100][T32417] EXT4-fs: Ignoring removed oldalloc option [ 429.465173][T32417] EXT4-fs: Ignoring removed bh option [ 429.492607][T32417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.534711][T32427] netlink: 'syz.3.11763': attribute type 10 has an invalid length. [ 429.542753][T32427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11763'. [ 429.561311][T32417] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.11762: Allocating blocks 497-513 which overlap fs metadata [ 429.608880][T32416] EXT4-fs (loop6): pa ffff888105b07460: logic 128, phys. 273, len 15 [ 429.617061][T32416] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 429.632340][T32427] dummy0: entered promiscuous mode [ 429.666418][T29169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.721610][T32441] vlan0: entered allmulticast mode [ 429.726799][T32441] dummy0: entered allmulticast mode [ 429.755190][T32443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11769'. [ 430.085492][T32467] syzkaller0: entered allmulticast mode [ 430.091875][T32467] syzkaller0: entered promiscuous mode [ 430.099248][T32467] syzkaller0 (unregistering): left allmulticast mode [ 430.106035][T32467] syzkaller0 (unregistering): left promiscuous mode [ 430.327609][ C0] ================================================================== [ 430.335729][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 430.341992][ C0] [ 430.344321][ C0] read to 0xffffc900024a79e0 of 4 bytes by task 32465 on cpu 1: [ 430.351960][ C0] do_select+0xe48/0xf50 [ 430.356238][ C0] core_sys_select+0x3d7/0x6e0 [ 430.361024][ C0] __se_sys_pselect6+0x216/0x280 [ 430.365983][ C0] __x64_sys_pselect6+0x78/0x90 [ 430.370864][ C0] x64_sys_call+0x1caa/0x2fb0 [ 430.375552][ C0] do_syscall_64+0xd2/0x200 [ 430.380059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.385969][ C0] [ 430.388290][ C0] write to 0xffffc900024a79e0 of 4 bytes by interrupt on cpu 0: [ 430.395980][ C0] pollwake+0xb6/0x100 [ 430.400054][ C0] __wake_up+0x63/0xb0 [ 430.404142][ C0] bpf_ringbuf_notify+0x22/0x30 [ 430.409025][ C0] irq_work_run+0xe2/0x2d0 [ 430.413476][ C0] __sysvec_irq_work+0x22/0x170 [ 430.418334][ C0] sysvec_irq_work+0x66/0x80 [ 430.422963][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 430.427906][ C0] native_apic_msr_write+0x3d/0x60 [ 430.433033][ C0] x2apic_send_IPI_self+0x10/0x20 [ 430.438071][ C0] arch_irq_work_raise+0x46/0x50 [ 430.443029][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 430.448418][ C0] irq_work_queue+0x70/0x100 [ 430.453021][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 430.457979][ C0] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 430.463441][ C0] bpf_trace_run3+0x10f/0x1d0 [ 430.468388][ C0] kmem_cache_free+0x257/0x300 [ 430.473166][ C0] vm_area_free+0x71/0xb0 [ 430.477510][ C0] remove_vma+0xc0/0xd0 [ 430.481672][ C0] exit_mmap+0x388/0x6c0 [ 430.485918][ C0] __mmput+0x28/0x1c0 [ 430.489913][ C0] mmput+0x40/0x50 [ 430.493642][ C0] exit_mm+0xe4/0x190 [ 430.497653][ C0] do_exit+0x417/0x1590 [ 430.501830][ C0] do_group_exit+0xff/0x140 [ 430.506345][ C0] get_signal+0xe59/0xf70 [ 430.510693][ C0] arch_do_signal_or_restart+0x96/0x480 [ 430.516243][ C0] exit_to_user_mode_loop+0x7a/0x100 [ 430.521535][ C0] do_syscall_64+0x1d6/0x200 [ 430.526133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.532038][ C0] [ 430.534364][ C0] value changed: 0x00000001 -> 0x00000000 [ 430.540085][ C0] [ 430.542411][ C0] Reported by Kernel Concurrency Sanitizer on: [ 430.548597][ C0] CPU: 0 UID: 0 PID: 32476 Comm: syz.6.11782 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 430.562760][ C0] Tainted: [W]=WARN [ 430.566563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.576627][ C0] ==================================================================