last executing test programs: 3.057080636s ago: executing program 4 (id=4239): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000840)=@ethtool_eeprom={0xb, 0x8, 0x6852, 0x96, "84f8db05ebf3518c33434f9fbd6efc403bdc687fd52fbc2e1700e2614f53432ee31771ea35649f0842442921a466a8fcaf4367c37dce7d357729b89335983c2162899f2f295880e756c69a02042ea4248ac8d08619d6a64f43262bca50d11b9068442382cc1d51ee00d06892a8b9053e015204d551fef699c2e2f5327ab237184e067e132108f4d6528b38c4db1d55bd37253a580c74"}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="75001b1217ec9aad97b47b", @ANYRESHEX=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095d4c28df431eb2ab8f08bb774d67a2901768343ce67ce7583c6bd06de826d2220e33d962b03cc0e1546026f5143dc5f7296bb35d467e5fa686db38d2eb6a5504d8d2f7f8dd8b29d9d0ccfd8e2ef0d4d09e54caf654219ff8f96e6a7782fb7401427a24a8a1a92f10c70cdfb56913b86e7d1c301fc786498ea6347f4742363318d73a807a3f8601795422ecda85024109d8d1695c4036bbca9991f"], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2, 0x0, 0xa}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c000000000700010000000000000000010000060900010073797a300069801805170000000c000240000000000000002a0c00e73f00000000000000c9fe380000000b8f4c00034015ffffffffffffff0c00024000000000b3000ffe0800054000000002713e775281bc705dca326c2b4da81607ffe74001"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4040041) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000240)=ANY=[], 0x190) write(0xffffffffffffffff, &(0x7f00000006c0)="a6a8479a18e4509a465a7b7602ea9ca801e84b410ef18e44d07949dd4d2e51470cf0cb337ddddb9c3a2589d45c946199e2ecacf18ff29aa1d9cfdd56a976cdc658be0298a34332910805df149a0300b3373ca965659ec5248df756bd76a3f22ecc5db5b710fa345ed52f9af98b0be5cbc9587b76f35ff7bae5838ba0b75fd86417684cdf8ee678996eb57a4a7540ad0500e524b279d5fc6e08d4725439a953b58862f8dad53a7fc14ae08cc054e9c2b77db70300fd9b52825feb49a1", 0xbc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="03be"], 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\xc1\xbf\xe81\x03\xe8\\\x7f\'\xe0\xa2\a\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8H$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2H\x13\xe4\xfb\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83', 0x40, 0x1e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)="6cd614dc9301aca067b8d04401eef2c044f327aaf4b2139473cc8e7726df7e9f273bdf93d756aab49dd7c3ba3ff31a7d7835caf16a1601f6728c09e097bb1e13ec862d01b23abf1d39e3e28f2f2ff9d01ad4c6b687c50476", &(0x7f0000000040), 0x81, r6, 0x4}, 0x38) munlockall() 2.924388736s ago: executing program 0 (id=4244): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) open_by_handle_at(r3, &(0x7f00000004c0)=@reiserfs_2={0x8, 0x2, {0x400, 0x2}}, 0x4001) 2.552178896s ago: executing program 1 (id=4248): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$team(0x0, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x31, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r4, &(0x7f0000000240), 0x0, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0) 2.389668039s ago: executing program 2 (id=4249): syz_open_dev$usbfs(0x0, 0xae, 0x202800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 2.319935394s ago: executing program 0 (id=4250): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000004c0)={0x0, 0xfffffffffffffe3b, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 2.259985969s ago: executing program 0 (id=4251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x2a, &(0x7f00000007c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x2, 0x0, 0x5, 0x6, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x4000, 0xa5, &(0x7f0000000340)=""/165, 0x41000, 0x8, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x0, 0xce8, 0x9}, 0x10, r3, 0x0, 0x1, &(0x7f0000000600)=[r4, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x5, 0x10}], 0x10, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xad}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) 2.239412051s ago: executing program 2 (id=4252): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f1, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x9}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.209315373s ago: executing program 4 (id=4253): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)}, {&(0x7f00000010c0)="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", 0x207}], 0x4}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) 1.99598814s ago: executing program 3 (id=4254): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x601, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x800001, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@access_uid={'access', 0x3d, r5}}, {@posixacl}, {@version_9p2000}, {@noextend}, {@afid={'afid', 0x3d, 0x5}}, {@privport}, {@noextend}, {@cache_loose}, {@version_L}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_measure}]}}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 1.987097721s ago: executing program 2 (id=4255): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380"], 0x150}}, 0x0) syz_clone3(&(0x7f0000000680)={0x100000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)=0x0, {0x36}, &(0x7f00000007c0)=""/236, 0xec, 0x0, 0x0}, 0x58) sched_setscheduler(r4, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.887074529s ago: executing program 2 (id=4256): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_pidfd_open(r0, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x50840080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.524164968s ago: executing program 0 (id=4257): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x8004, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.264914839s ago: executing program 1 (id=4258): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.160514667s ago: executing program 3 (id=4259): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000046c400"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x26, 0x1, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) setregid(r3, 0x0) 916.486197ms ago: executing program 2 (id=4260): r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10400, 0x10000, 0x0, 0x1, 0x3, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x28, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0"]) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 710.356093ms ago: executing program 0 (id=4261): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) 700.916124ms ago: executing program 4 (id=4262): syz_open_dev$usbfs(0x0, 0xae, 0x202800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 663.285827ms ago: executing program 0 (id=4263): getpid() mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000840)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0xa, 0x4, 0x9) connect$netlink(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x40) write(r1, 0x0, 0x0) 662.150837ms ago: executing program 2 (id=4264): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) eventfd2(0x9, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 596.087332ms ago: executing program 3 (id=4265): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, 0x0}, 0x10004024) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, [@IFLA_LINKINFO={0xb, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000540)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, 0x0, 0x40004) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xc0}}, 0x4040881) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffe88, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xfff3}, {0x2}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 595.748932ms ago: executing program 4 (id=4266): prctl$PR_SET_NAME(0xf, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff0200"/53], 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, 0x0}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x8, 0x1, 0x3, 0x0, 0x400, 0x2}, 0x20) r5 = dup(r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x8) 571.849114ms ago: executing program 3 (id=4267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x1, 0x4) vmsplice(r6, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000480)="37c2", 0x2}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 557.559535ms ago: executing program 4 (id=4268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000010000000000000b703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10002, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000020603ffffffffffffffe9000000000314000300686173683a69702c706f72742c6970000900020073797a31000000001400078005001500100000000800124000080000050005000a00000005000400000000000500010007"], 0x60}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 382.550259ms ago: executing program 1 (id=4269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1f, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000008000000000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x5, 0xb0, &(0x7f0000000500)=""/176, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xd, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r2, r2, r2, 0xffffffffffffffff, r2, r2], &(0x7f00000007c0)=[{0x4, 0x2, 0x0, 0xc}, {0x2, 0x2, 0x7, 0x8}, {0x0, 0x5, 0x5, 0x1}, {0x2, 0x3, 0x4, 0x6}, {0x1, 0x5, 0x3, 0x9}, {0x3, 0x5, 0xc, 0x6}, {0x5, 0x5, 0x6, 0x1}], 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000180)='mm_collapse_huge_page\x00', r3, 0x0, 0x8000000000000001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910680000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 379.589839ms ago: executing program 3 (id=4270): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 367.43482ms ago: executing program 4 (id=4271): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x8004, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 197.271954ms ago: executing program 1 (id=4272): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2002, 0x0, 0x24d, 0x4000008, 0x2, 0xffffffff, 0x3, 0x80000001}}], 0x30}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000004940)={0x3, 0x4, 0x8, 0xfffffff7}, &(0x7f0000004980)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x80000000000000}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 167.184866ms ago: executing program 3 (id=4273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 68.091574ms ago: executing program 1 (id=4274): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xc1]}, 0x8, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x20000800) 0s ago: executing program 1 (id=4275): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 port 8472 - 0 [ 305.853723][T14745] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.913970][T14745] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.923870][T14745] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.208441][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.005519][ T7326] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.013822][ T7326] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.024306][ T3635] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.032554][ T3635] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.043848][ T3657] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.052025][ T3657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.062787][ T3657] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.070991][ T3657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.744226][T14798] loop1: detected capacity change from 0 to 1024 [ 307.752985][T14798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.772921][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'. [ 307.797155][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.970314][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3470'. [ 308.110961][T14819] SELinux: failed to load policy [ 308.143366][T14820] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3468'. [ 308.166531][T14823] lo speed is unknown, defaulting to 1000 [ 308.173762][T14823] lo speed is unknown, defaulting to 1000 [ 308.770418][T14839] loop1: detected capacity change from 0 to 2048 [ 308.777373][T14839] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.807213][T14839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.964231][T14843] smc: net device bond0 applied user defined pnetid SYZ0 [ 308.980817][T14843] smc: net device bond0 erased user defined pnetid SYZ0 [ 309.261647][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.283761][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 309.283775][ T29] audit: type=1326 audit(310.612:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.324007][ T29] audit: type=1326 audit(310.642:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.347086][ T29] audit: type=1326 audit(310.642:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.370110][ T29] audit: type=1326 audit(310.642:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.393130][ T29] audit: type=1326 audit(310.642:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.416133][ T29] audit: type=1326 audit(310.642:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.439090][ T29] audit: type=1326 audit(310.642:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.462091][ T29] audit: type=1326 audit(310.642:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.485114][ T29] audit: type=1326 audit(310.642:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.508408][ T29] audit: type=1326 audit(310.652:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 309.654644][T14884] lo speed is unknown, defaulting to 1000 [ 309.661114][T14884] lo speed is unknown, defaulting to 1000 [ 310.086035][T14924] hub 6-0:1.0: USB hub found [ 310.096765][T14924] hub 6-0:1.0: 8 ports detected [ 311.632741][T15012] loop1: detected capacity change from 0 to 512 [ 311.844704][T15012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.939910][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.726554][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 312.735494][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 312.753241][T15153] lo speed is unknown, defaulting to 1000 [ 312.759899][T15153] lo speed is unknown, defaulting to 1000 [ 312.959533][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'. [ 313.177102][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3526'. [ 313.590237][T15185] tipc: Enabled bearer , priority 0 [ 313.598671][T15185] syzkaller0: entered promiscuous mode [ 313.604245][T15185] syzkaller0: entered allmulticast mode [ 313.613945][T15185] tipc: Resetting bearer [ 313.620874][T15184] tipc: Resetting bearer [ 313.628504][T15184] tipc: Disabling bearer [ 313.698613][T15190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 313.705117][T15190] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 313.712852][T15190] vhci_hcd vhci_hcd.0: Device attached [ 313.730602][T15191] vhci_hcd: connection closed [ 313.730693][ T3642] vhci_hcd: stop threads [ 313.739697][ T3642] vhci_hcd: release socket [ 313.744125][ T3642] vhci_hcd: disconnect device [ 313.958547][T15197] netlink: 'syz.3.3532': attribute type 10 has an invalid length. [ 313.966534][T15197] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3532'. [ 314.092106][T15201] lo speed is unknown, defaulting to 1000 [ 314.099698][T15201] lo speed is unknown, defaulting to 1000 [ 314.150823][T15206] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 314.160180][T15206] syzkaller0: entered promiscuous mode [ 314.165684][T15206] syzkaller0: entered allmulticast mode [ 314.285403][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 314.285415][ T29] audit: type=1326 audit(315.617:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.0.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 314.334895][ T29] audit: type=1326 audit(315.657:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.0.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 314.357956][ T29] audit: type=1326 audit(315.657:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.0.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 314.446889][T15214] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3537'. [ 314.535117][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'. [ 314.607992][T15222] lo speed is unknown, defaulting to 1000 [ 314.633301][T15222] lo speed is unknown, defaulting to 1000 [ 314.912762][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3541'. [ 314.921741][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3541'. [ 314.938652][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3541'. [ 315.358343][ T29] audit: type=1326 audit(316.688:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.381487][ T29] audit: type=1326 audit(316.688:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.417583][T15244] lo speed is unknown, defaulting to 1000 [ 315.666028][T15244] lo speed is unknown, defaulting to 1000 [ 315.679625][ T29] audit: type=1326 audit(316.748:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.702675][ T29] audit: type=1326 audit(316.748:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.725651][ T29] audit: type=1326 audit(316.748:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.748731][ T29] audit: type=1326 audit(316.768:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 315.771671][ T29] audit: type=1326 audit(316.768:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15253 comm="syz.0.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 316.264348][T15267] lo speed is unknown, defaulting to 1000 [ 316.292200][T15267] lo speed is unknown, defaulting to 1000 [ 316.570711][T15291] $Hÿ: left promiscuous mode [ 316.576979][T15291] dummy0: left promiscuous mode [ 316.581976][T15291] veth0_to_team: left promiscuous mode [ 316.602177][T15291] veth3: left promiscuous mode [ 316.607081][T15291] bond1: left promiscuous mode [ 316.612260][T15291] veth7: left promiscuous mode [ 316.617044][T15291] gretap0: left promiscuous mode [ 316.622262][T15291] bond7: left promiscuous mode [ 316.655502][T15291] geneve2: left promiscuous mode [ 316.670978][T15291] bond0: left allmulticast mode [ 316.675858][T15291] bond0: left promiscuous mode [ 316.700293][T15302] block device autoloading is deprecated and will be removed. [ 316.710343][ T3656] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.718729][ T3656] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.750634][ T3656] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.759077][ T3656] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.769765][ T3656] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.778141][ T3656] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.788140][ T3656] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.796513][ T3656] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 317.618468][T15311] lo speed is unknown, defaulting to 1000 [ 317.658462][T15311] lo speed is unknown, defaulting to 1000 [ 317.867407][T15330] lo speed is unknown, defaulting to 1000 [ 317.884931][T15330] lo speed is unknown, defaulting to 1000 [ 317.938805][T15333] __nla_validate_parse: 11 callbacks suppressed [ 317.938877][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 318.011778][T15333] tipc: Resetting bearer [ 318.018440][T15333] bond6: left promiscuous mode [ 318.028116][T15333] geneve2: left promiscuous mode [ 318.042881][ T3687] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.051383][ T3687] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.061198][ T3687] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.069560][ T3687] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.094210][ T3687] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.102621][ T3687] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.130478][ T3687] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.138883][ T3687] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.172650][T15352] lo speed is unknown, defaulting to 1000 [ 318.179546][T15352] lo speed is unknown, defaulting to 1000 [ 318.790924][T15364] lo speed is unknown, defaulting to 1000 [ 318.797843][T15364] lo speed is unknown, defaulting to 1000 [ 319.422785][T15370] lo speed is unknown, defaulting to 1000 [ 319.429518][T15370] lo speed is unknown, defaulting to 1000 [ 320.029127][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 320.029141][ T29] audit: type=1326 audit(321.361:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.058224][ T29] audit: type=1326 audit(321.361:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.081247][ T29] audit: type=1326 audit(321.361:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.104348][ T29] audit: type=1326 audit(321.361:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.127524][ T29] audit: type=1326 audit(321.361:10706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.141197][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 320.150595][ T29] audit: type=1326 audit(321.361:10707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.182459][ T29] audit: type=1326 audit(321.361:10708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.205416][ T29] audit: type=1326 audit(321.371:10709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.246060][ T29] audit: type=1326 audit(321.401:10710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.269089][ T29] audit: type=1326 audit(321.401:10711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.4.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 320.333724][T15378] ref_ctr_offset mismatch. inode: 0xf24 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 320.351948][T15384] loop1: detected capacity change from 0 to 512 [ 320.372187][T15384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.398567][T15388] loop0: detected capacity change from 0 to 512 [ 320.407588][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.438720][T15388] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.3591: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 320.465111][T15388] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.3591: Bad quota inode: 3, type: 0 [ 320.487439][T15388] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 320.504716][T15388] EXT4-fs (loop0): mount failed [ 320.556535][T15405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3595'. [ 320.565850][T15405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3595'. [ 320.576237][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3593'. [ 320.597511][T15405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3595'. [ 320.606627][T15405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3595'. [ 321.292159][T15388] lo speed is unknown, defaulting to 1000 [ 321.393985][T15388] lo speed is unknown, defaulting to 1000 [ 321.572732][T15429] vhci_hcd: invalid port number 96 [ 321.578203][T15429] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 324.713237][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 325.459732][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 325.482053][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 325.532601][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 325.532613][ T29] audit: type=1326 audit(326.874:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.1.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 325.567798][ T29] audit: type=1326 audit(326.904:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.1.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 325.834332][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 325.933858][T15485] netlink: 'syz.2.3619': attribute type 13 has an invalid length. [ 326.049379][T15485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.260610][T15493] loop8: detected capacity change from 0 to 16384 [ 326.495538][T15499] random: crng reseeded on system resumption [ 326.513243][ T29] audit: type=1400 audit(327.834:10813): avc: denied { watch } for pid=15492 comm="syz.2.3621" path="/proc/1803/map_files" dev="proc" ino=52039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 326.535846][ T29] audit: type=1400 audit(327.844:10814): avc: denied { append } for pid=15492 comm="syz.2.3621" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.845426][T15494] loop8: detected capacity change from 16384 to 16383 [ 327.190318][T15510] loop0: detected capacity change from 0 to 512 [ 327.659443][T15510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.886465][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.170979][T15533] loop0: detected capacity change from 0 to 8192 [ 328.346569][T15531] binfmt_misc: register: failed to install interpreter file ./file0 [ 328.460027][T15540] lo speed is unknown, defaulting to 1000 [ 328.467124][T15540] lo speed is unknown, defaulting to 1000 [ 328.556751][ T29] audit: type=1326 audit(329.905:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.579789][ T29] audit: type=1326 audit(329.905:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.696879][T15543] lo speed is unknown, defaulting to 1000 [ 328.727326][T15543] lo speed is unknown, defaulting to 1000 [ 328.744362][ T29] audit: type=1326 audit(329.975:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.767373][ T29] audit: type=1326 audit(329.975:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.790376][ T29] audit: type=1326 audit(329.975:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.813365][ T29] audit: type=1326 audit(329.975:10820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 328.934224][T15551] syzkaller0: entered promiscuous mode [ 328.939824][T15551] syzkaller0: entered allmulticast mode [ 329.160436][T15560] loop0: detected capacity change from 0 to 128 [ 329.180904][T15560] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.193813][T15553] loop1: detected capacity change from 0 to 512 [ 329.197493][T15560] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.316089][ T3642] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.354189][T15569] loop0: detected capacity change from 0 to 512 [ 329.383019][T15553] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.3637: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 329.404690][T15553] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.3637: Bad quota inode: 3, type: 0 [ 329.418862][T15553] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 329.453861][T15553] EXT4-fs (loop1): mount failed [ 329.467020][T15569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.515912][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.650293][T15553] lo speed is unknown, defaulting to 1000 [ 329.660478][T15553] lo speed is unknown, defaulting to 1000 [ 329.851682][T15581] netlink: 'syz.1.3645': attribute type 10 has an invalid length. [ 329.860784][T15581] team0: Port device hsr_slave_0 added [ 330.278186][T15597] Set syz1 is full, maxelem 65536 reached [ 330.689644][T15605] netlink: 'syz.2.3651': attribute type 10 has an invalid length. [ 330.697608][T15605] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3651'. [ 330.955582][T15608] lo speed is unknown, defaulting to 1000 [ 330.962587][T15608] lo speed is unknown, defaulting to 1000 [ 331.134904][T15607] lo speed is unknown, defaulting to 1000 [ 331.192465][T15607] lo speed is unknown, defaulting to 1000 [ 331.219158][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 331.228078][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 331.647256][T15623] lo speed is unknown, defaulting to 1000 [ 331.657095][T15623] lo speed is unknown, defaulting to 1000 [ 331.685599][T15626] kernel profiling enabled (shift: 17) [ 331.786482][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3670'. [ 331.818236][T15632] macvtap1: entered promiscuous mode [ 331.823667][T15632] bond0: entered promiscuous mode [ 331.828977][T15632] macvtap1: entered allmulticast mode [ 331.834523][T15632] bond0: entered allmulticast mode [ 331.842083][T15632] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 331.851173][T15634] bond0: left allmulticast mode [ 331.856149][T15634] bond0: left promiscuous mode [ 331.903091][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 331.903105][ T29] audit: type=1400 audit(333.246:10841): avc: denied { append } for pid=15635 comm="syz.1.3661" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.010021][T15636] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3661'. [ 332.019159][T15636] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3661'. [ 332.068021][T15644] lo speed is unknown, defaulting to 1000 [ 332.076509][T15644] lo speed is unknown, defaulting to 1000 [ 332.127942][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 332.136918][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 332.152431][T15648] block device autoloading is deprecated and will be removed. [ 332.304898][T15655] loop1: detected capacity change from 0 to 8192 [ 332.351027][T15655] binfmt_misc: register: failed to install interpreter file ./file0 [ 332.489424][T15661] netlink: 'syz.1.3667': attribute type 10 has an invalid length. [ 332.497383][T15661] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3667'. [ 332.651879][T15663] loop2: detected capacity change from 0 to 512 [ 332.662470][T15663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.707801][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.919084][T15673] lo speed is unknown, defaulting to 1000 [ 332.926754][T15673] lo speed is unknown, defaulting to 1000 [ 333.339932][T15680] loop2: detected capacity change from 0 to 512 [ 333.357190][T15680] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.3673: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 333.377451][T15680] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3673: Bad quota inode: 3, type: 0 [ 333.393255][T15680] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 333.410152][T15680] EXT4-fs (loop2): mount failed [ 333.429266][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 333.527799][ T29] audit: type=1326 audit(334.867:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 333.550935][ T29] audit: type=1326 audit(334.867:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 333.619407][ T29] audit: type=1326 audit(334.867:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 333.642531][ T29] audit: type=1326 audit(334.867:10845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 333.666117][ T29] audit: type=1326 audit(334.867:10846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 333.766160][T15696] lo speed is unknown, defaulting to 1000 [ 333.790506][T15680] lo speed is unknown, defaulting to 1000 [ 333.793570][T15696] lo speed is unknown, defaulting to 1000 [ 333.816082][T15680] lo speed is unknown, defaulting to 1000 [ 333.866458][T15704] hub 8-0:1.0: USB hub found [ 333.871192][T15704] hub 8-0:1.0: 8 ports detected [ 334.034875][T15702] netlink: 'syz.4.3680': attribute type 6 has an invalid length. [ 334.138733][ T29] audit: type=1107 audit(335.477:10847): pid=15708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ïxtâ²k½Wî‰ÃˆxD¤¼‚Ú˜ýAŸ ™ðq#/ª"ß¿€F&@ –l=iÉ7Xé/'}dôRÞ>ë¤w&ñ7HkN}QÔJdî0$r„^™T[ByšF÷Úšw‘n %ë„ [ 334.138733][ T29] ¬‰‡Y@(&@©jÞb·ÆÞºvÛjhÜš,Ø9ßò|šD“´J÷l±ÃeÀð|ÝÄø²Ë¨oIq3ð’°.ÄÒÈTüAátŽFHù}…Ï' [ 334.207113][T15714] bond_slave_1: entered promiscuous mode [ 334.228977][T15714] bond_slave_1 (unregistering): left promiscuous mode [ 334.230205][T15713] netlink: 'syz.4.3682': attribute type 10 has an invalid length. [ 334.324262][T15715] loop2: detected capacity change from 0 to 512 [ 334.350102][T15715] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.3693: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 334.369530][T15715] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3693: Bad quota inode: 3, type: 0 [ 334.381798][T15715] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 334.437084][T15715] EXT4-fs (loop2): mount failed [ 334.561460][T15715] lo speed is unknown, defaulting to 1000 [ 334.570378][T15715] lo speed is unknown, defaulting to 1000 [ 334.733023][T15723] netlink: 'syz.3.3687': attribute type 10 has an invalid length. [ 334.754678][T15723] hsr_slave_0: entered promiscuous mode [ 334.760421][T15723] team0: Port device hsr_slave_0 added [ 334.852216][T15734] loop2: detected capacity change from 0 to 512 [ 334.886431][T15734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.954228][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.997479][T15743] lo speed is unknown, defaulting to 1000 [ 335.013695][T15743] lo speed is unknown, defaulting to 1000 [ 335.022610][ T29] audit: type=1326 audit(336.357:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 335.045628][ T29] audit: type=1326 audit(336.357:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 335.084498][T15748] loop2: detected capacity change from 0 to 512 [ 335.088050][T15724] netlink: 'syz.0.3696': attribute type 6 has an invalid length. [ 335.137328][ T29] audit: type=1326 audit(336.407:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 335.205838][T15748] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.237123][T15748] EXT4-fs (loop2): mount failed [ 335.282419][T15756] random: crng reseeded on system resumption [ 335.455600][T15758] loop2: detected capacity change from 0 to 512 [ 335.475186][T15758] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.513499][T15758] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm +}[@: corrupted in-inode xattr: overlapping e_value [ 335.566180][T15758] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 335.620483][T15758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.715767][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.767829][T15765] loop0: detected capacity change from 0 to 512 [ 335.795259][T15765] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.3700: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 335.824672][T15765] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.3700: Bad quota inode: 3, type: 0 [ 335.855829][T15765] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 335.894281][T15771] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 335.926648][T15765] EXT4-fs (loop0): mount failed [ 336.113331][T15765] lo speed is unknown, defaulting to 1000 [ 336.123494][T15765] lo speed is unknown, defaulting to 1000 [ 337.008120][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 337.008133][ T29] audit: type=1326 audit(338.347:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.097452][T15804] SELinux: ebitmap: truncated map [ 337.111155][ T29] audit: type=1326 audit(338.347:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.134286][ T29] audit: type=1326 audit(338.347:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.157157][ T29] audit: type=1326 audit(338.347:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.180301][ T29] audit: type=1326 audit(338.347:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.203309][ T29] audit: type=1326 audit(338.347:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.217254][T15804] SELinux: failed to load policy [ 337.226194][ T29] audit: type=1326 audit(338.347:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.254023][ T29] audit: type=1326 audit(338.347:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.277064][ T29] audit: type=1326 audit(338.357:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.300012][ T29] audit: type=1326 audit(338.357:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 337.475539][T15822] netlink: 'syz.1.3715': attribute type 13 has an invalid length. [ 337.500332][T15822] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.510270][T15822] tipc: Resetting bearer [ 337.654146][T15822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.794361][T15829] lo speed is unknown, defaulting to 1000 [ 337.800728][T15829] lo speed is unknown, defaulting to 1000 [ 337.843681][T15826] lo speed is unknown, defaulting to 1000 [ 337.850757][T15826] lo speed is unknown, defaulting to 1000 [ 337.955832][T15833] loop1: detected capacity change from 0 to 512 [ 338.001277][T15833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.037355][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.080332][T15842] netlink: 'syz.3.3731': attribute type 13 has an invalid length. [ 338.113687][T15842] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 338.121730][T15842] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.132771][T15842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.148439][ T5814] lo speed is unknown, defaulting to 1000 [ 338.154310][ T5814] syz0: Port: 1 Link ACTIVE [ 338.333805][T15855] loop0: detected capacity change from 0 to 1024 [ 338.340356][T15855] EXT4-fs: Ignoring removed orlov option [ 338.348738][T15857] netlink: 'syz.3.3726': attribute type 13 has an invalid length. [ 338.379983][T15855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.403670][T15857] 0ªî{X¹¦: left allmulticast mode [ 338.417571][T15861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=15861 comm=syz.3.3726 [ 338.565103][T15857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.739908][T15859] lo speed is unknown, defaulting to 1000 [ 338.747879][T15859] lo speed is unknown, defaulting to 1000 [ 339.424200][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.527799][T15877] Invalid option length (1265) for dns_resolver key [ 339.754242][T15884] loop1: detected capacity change from 0 to 512 [ 339.782129][T15877] loop0: detected capacity change from 0 to 512 [ 339.824457][T15884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.977089][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.013528][T15877] EXT4-fs (loop0): too many log groups per flexible block group [ 340.021266][T15877] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 340.262909][T15877] EXT4-fs (loop0): mount failed [ 340.437554][T15901] syzkaller0: entered promiscuous mode [ 340.443124][T15901] syzkaller0: entered allmulticast mode [ 340.640538][T15905] veth0_to_team: entered promiscuous mode [ 340.963490][T15915] loop1: detected capacity change from 0 to 128 [ 341.094406][T15920] loop0: detected capacity change from 0 to 512 [ 341.130179][T15920] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3745: corrupted in-inode xattr: invalid ea_ino [ 341.187263][T15924] __nla_validate_parse: 4 callbacks suppressed [ 341.187277][T15924] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3746'. [ 341.216210][T15920] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3745: couldn't read orphan inode 15 (err -117) [ 341.278346][T15920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.562207][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.774768][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3755'. [ 342.589765][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 342.589778][ T29] audit: type=1326 audit(343.928:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 342.647637][T15968] loop0: detected capacity change from 0 to 512 [ 342.661469][T15968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.691664][ T29] audit: type=1326 audit(343.978:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf3265ade9 code=0x7ffc0000 [ 342.714584][ T29] audit: type=1326 audit(343.978:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 342.737602][ T29] audit: type=1326 audit(343.978:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf3265ade9 code=0x7ffc0000 [ 342.760486][ T29] audit: type=1326 audit(343.978:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 342.783515][ T29] audit: type=1326 audit(343.978:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 342.806580][ T29] audit: type=1326 audit(343.978:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 342.829559][ T29] audit: type=1326 audit(343.978:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 342.852638][ T29] audit: type=1326 audit(343.978:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 342.875645][ T29] audit: type=1326 audit(343.978:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15964 comm="syz.4.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 342.918655][T15968] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm +}[@: corrupted in-inode xattr: overlapping e_value [ 342.934738][T15968] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 342.946569][T15968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.985604][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.145241][T15993] veth0_to_team: entered promiscuous mode [ 343.151018][T15993] veth0_to_team: left allmulticast mode [ 343.166757][T15981] lo speed is unknown, defaulting to 1000 [ 343.178685][T15981] lo speed is unknown, defaulting to 1000 [ 343.500703][T16002] loop0: detected capacity change from 0 to 1024 [ 343.507882][T16002] EXT4-fs: Ignoring removed orlov option [ 343.517082][T16002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.554490][T16001] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 343.773315][T16006] lo speed is unknown, defaulting to 1000 [ 343.780387][T16006] lo speed is unknown, defaulting to 1000 [ 343.881312][T16012] 9pnet_fd: Insufficient options for proto=fd [ 344.067363][T16020] lo speed is unknown, defaulting to 1000 [ 344.087967][T16018] SELinux: policydb string does not match my string SE Linux [ 344.095784][T16018] SELinux: failed to load policy [ 344.131071][T16020] lo speed is unknown, defaulting to 1000 [ 344.155240][T16021] loop2: detected capacity change from 0 to 1024 [ 344.172143][T15999] syz.0.3770 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 344.173901][T16021] EXT4-fs: inline encryption not supported [ 344.186324][T15999] CPU: 0 UID: 0 PID: 15999 Comm: syz.0.3770 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.186352][T15999] Tainted: [W]=WARN [ 344.186358][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.186443][T15999] Call Trace: [ 344.186451][T15999] [ 344.186460][T15999] __dump_stack+0x1d/0x30 [ 344.186519][T15999] dump_stack_lvl+0xe8/0x140 [ 344.186539][T15999] dump_stack+0x15/0x1b [ 344.186555][T15999] dump_header+0x81/0x220 [ 344.186585][T15999] oom_kill_process+0x342/0x400 [ 344.186637][T15999] out_of_memory+0x979/0xb80 [ 344.186670][T15999] try_charge_memcg+0x5e6/0x9e0 [ 344.186765][T15999] obj_cgroup_charge_pages+0xa6/0x150 [ 344.186796][T15999] __memcg_kmem_charge_page+0x9f/0x170 [ 344.186826][T15999] __alloc_frozen_pages_noprof+0x188/0x360 [ 344.186926][T15999] alloc_pages_mpol+0xb3/0x250 [ 344.186972][T15999] alloc_pages_noprof+0x90/0x130 [ 344.187002][T15999] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 344.187043][T15999] __kvmalloc_node_noprof+0x30f/0x4e0 [ 344.187071][T15999] ? ip_set_alloc+0x1f/0x30 [ 344.187145][T15999] ? ip_set_alloc+0x1f/0x30 [ 344.187251][T15999] ip_set_alloc+0x1f/0x30 [ 344.187340][T15999] hash_netiface_create+0x282/0x740 [ 344.187373][T15999] ? __pfx_hash_netiface_create+0x10/0x10 [ 344.187410][T15999] ip_set_create+0x3cc/0x960 [ 344.187445][T15999] ? __nla_parse+0x40/0x60 [ 344.187469][T15999] nfnetlink_rcv_msg+0x4c3/0x590 [ 344.187517][T15999] netlink_rcv_skb+0x123/0x220 [ 344.187536][T15999] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 344.187575][T15999] nfnetlink_rcv+0x16b/0x1690 [ 344.187614][T15999] ? __list_del_entry_valid_or_report+0x65/0x130 [ 344.187710][T15999] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 344.187807][T15999] ? should_fail_ex+0x30/0x280 [ 344.187827][T15999] ? selinux_nlmsg_lookup+0x99/0x890 [ 344.187858][T15999] ? __rcu_read_unlock+0x34/0x70 [ 344.187957][T15999] ? __netlink_lookup+0x266/0x2a0 [ 344.187982][T15999] netlink_unicast+0x5bd/0x690 [ 344.188015][T15999] netlink_sendmsg+0x58b/0x6b0 [ 344.188038][T15999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.188072][T15999] __sock_sendmsg+0x145/0x180 [ 344.188100][T15999] ____sys_sendmsg+0x31e/0x4e0 [ 344.188199][T15999] ___sys_sendmsg+0x17b/0x1d0 [ 344.188233][T15999] __x64_sys_sendmsg+0xd4/0x160 [ 344.188259][T15999] x64_sys_call+0x191e/0x2ff0 [ 344.188341][T15999] do_syscall_64+0xd2/0x200 [ 344.188366][T15999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.188390][T15999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.188415][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.188458][T15999] RIP: 0033:0x7efe2274ebe9 [ 344.188474][T15999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.188491][T15999] RSP: 002b:00007efe211b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.188510][T15999] RAX: ffffffffffffffda RBX: 00007efe22975fa0 RCX: 00007efe2274ebe9 [ 344.188522][T15999] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 344.188535][T15999] RBP: 00007efe227d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 344.188615][T15999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.188628][T15999] R13: 00007efe22976038 R14: 00007efe22975fa0 R15: 00007ffe902123e8 [ 344.188646][T15999] [ 344.188654][T15999] memory: usage 307200kB, limit 307200kB, failcnt 405 [ 344.501561][T16021] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 344.502735][T15999] memory+swap: usage 308224kB, limit 9007199254740988kB, failcnt 0 [ 344.510697][T16021] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 344.513760][T15999] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 344.513775][T15999] Memory cgroup stats for /syz0: [ 344.515367][T15999] cache 32768 [ 344.560293][T16021] JBD2: no valid journal superblock found [ 344.561154][T15999] rss 0 [ 344.561162][T15999] shmem 0 [ 344.561169][T15999] mapped_file 0 [ 344.564452][T16021] EXT4-fs (loop2): Could not load journal inode [ 344.570129][T15999] dirty 0 [ 344.588401][T15999] writeback 0 [ 344.591717][T15999] workingset_refault_anon 2283 [ 344.596469][T15999] workingset_refault_file 3020 [ 344.601247][T15999] swap 1048576 [ 344.604605][T15999] swapcached 8192 [ 344.608222][T15999] pgpgin 497290 [ 344.611692][T15999] pgpgout 497277 [ 344.615270][T15999] pgfault 461033 [ 344.618799][T15999] pgmajfault 447 [ 344.622360][T15999] inactive_anon 8192 [ 344.626240][T15999] active_anon 0 [ 344.629679][T15999] inactive_file 20480 [ 344.633675][T15999] active_file 24576 [ 344.637463][T15999] unevictable 0 [ 344.640945][T15999] hierarchical_memory_limit 314572800 [ 344.646310][T15999] hierarchical_memsw_limit 9223372036854771712 [ 344.652548][T15999] total_cache 32768 [ 344.656336][T15999] total_rss 0 [ 344.659619][T15999] total_shmem 0 [ 344.663075][T15999] total_mapped_file 0 [ 344.667124][T15999] total_dirty 0 [ 344.670640][T15999] total_writeback 0 [ 344.674464][T15999] total_workingset_refault_anon 2283 [ 344.679740][T15999] total_workingset_refault_file 3020 [ 344.685098][T15999] total_swap 1048576 [ 344.688995][T15999] total_swapcached 8192 [ 344.693148][T15999] total_pgpgin 497290 [ 344.697106][T15999] total_pgpgout 497277 [ 344.701208][T15999] total_pgfault 461033 [ 344.705259][T15999] total_pgmajfault 447 [ 344.709309][T15999] total_inactive_anon 8192 [ 344.713737][T15999] total_active_anon 0 [ 344.717700][T15999] total_inactive_file 20480 [ 344.722191][T15999] total_active_file 24576 [ 344.726503][T15999] total_unevictable 0 [ 344.730465][T15999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3770,pid=15998,uid=0 [ 344.745315][T15999] Memory cgroup out of memory: Killed process 15998 (syz.0.3770) total-vm:95808kB, anon-rss:1076kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 345.079746][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.080493][T16031] loop1: detected capacity change from 0 to 512 [ 345.131704][T16031] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3779: corrupted in-inode xattr: invalid ea_ino [ 345.160003][T16031] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3779: couldn't read orphan inode 15 (err -117) [ 345.172494][T16031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.249153][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3781'. [ 345.297185][T16039] bridge2: port 1(veth9) entered blocking state [ 345.303573][T16039] bridge2: port 1(veth9) entered disabled state [ 345.310005][T16039] veth9: entered allmulticast mode [ 345.316827][T16039] veth9: entered promiscuous mode [ 345.333719][T16046] lo speed is unknown, defaulting to 1000 [ 345.339991][T16046] lo speed is unknown, defaulting to 1000 [ 345.367270][T16039] vlan0: entered allmulticast mode [ 345.372476][T16039] veth0_to_hsr: entered allmulticast mode [ 345.378434][T16039] bridge2: port 2(vlan0) entered blocking state [ 345.379157][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.384722][T16039] bridge2: port 2(vlan0) entered disabled state [ 345.400595][T16039] vlan0: entered promiscuous mode [ 345.405679][T16039] veth0_to_hsr: entered promiscuous mode [ 345.409058][T16051] loop1: detected capacity change from 0 to 128 [ 345.626837][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3787'. [ 346.241942][T16065] lo speed is unknown, defaulting to 1000 [ 346.249220][T16065] lo speed is unknown, defaulting to 1000 [ 346.449634][T16069] $Hÿ: entered promiscuous mode [ 346.541539][T16074] loop2: detected capacity change from 0 to 512 [ 346.577140][T16074] ext4: Bad value for 'jqfmt' [ 346.603883][T16076] netlink: 'syz.4.3793': attribute type 1 has an invalid length. [ 346.696936][T16076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 346.722304][T16076] macvlan0: entered promiscuous mode [ 346.727719][T16076] macvlan0: entered allmulticast mode [ 346.735178][T16076] bond12: entered promiscuous mode [ 346.740496][T16076] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 346.749804][T16076] bond12: left promiscuous mode [ 346.891010][T16094] lo speed is unknown, defaulting to 1000 [ 346.898235][T16094] lo speed is unknown, defaulting to 1000 [ 347.232586][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 347.339191][T16070] loop0: detected capacity change from 0 to 1024 [ 347.453296][T16070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.000016][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 348.000029][ T29] audit: type=1326 audit(349.339:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.229967][ T29] audit: type=1326 audit(349.379:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.252575][ T29] audit: type=1326 audit(349.379:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.274949][ T29] audit: type=1326 audit(349.379:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.297644][ T29] audit: type=1326 audit(349.379:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.320098][ T29] audit: type=1326 audit(349.379:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.342580][ T29] audit: type=1326 audit(349.379:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.365034][ T29] audit: type=1326 audit(349.379:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.387598][ T29] audit: type=1326 audit(349.379:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.410057][ T29] audit: type=1326 audit(349.379:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 348.673612][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.998831][T16127] lo speed is unknown, defaulting to 1000 [ 349.009294][T16127] lo speed is unknown, defaulting to 1000 [ 349.192786][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 349.740364][T16149] lo speed is unknown, defaulting to 1000 [ 349.750139][T16149] lo speed is unknown, defaulting to 1000 [ 349.764432][T16151] Invalid option length (1265) for dns_resolver key [ 349.794153][T16153] loop0: detected capacity change from 0 to 512 [ 349.826059][T16153] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 349.841470][T16153] EXT4-fs (loop0): mount failed [ 350.289299][T16172] lo speed is unknown, defaulting to 1000 [ 350.296456][T16172] lo speed is unknown, defaulting to 1000 [ 350.722365][T16187] netlink: 'syz.4.3829': attribute type 13 has an invalid length. [ 350.745385][T16187] 8021q: adding VLAN 0 to HW filter on device  [ 350.756158][T16187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.860344][T16187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=16187 comm=syz.4.3829 [ 351.610478][T16198] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3833'. [ 351.619536][T16198] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3833'. [ 351.816704][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3837'. [ 351.998203][T16214] lo speed is unknown, defaulting to 1000 [ 352.005079][T16214] lo speed is unknown, defaulting to 1000 [ 352.526580][T16226] loop1: detected capacity change from 0 to 128 [ 352.743740][T16244] loop1: detected capacity change from 0 to 512 [ 352.751626][T16244] EXT4-fs: Ignoring removed nobh option [ 352.762912][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3845: corrupted inode contents [ 352.777099][T16244] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.3845: mark_inode_dirty error [ 352.792218][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.3845: corrupted inode contents [ 352.805523][T16244] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3845: mark_inode_dirty error [ 352.817236][T16244] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3845: Failed to acquire dquot type 0 [ 352.831092][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3845: corrupted inode contents [ 352.844570][T16244] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.3845: mark_inode_dirty error [ 352.854618][T16253] lo speed is unknown, defaulting to 1000 [ 352.862728][T16253] lo speed is unknown, defaulting to 1000 [ 352.865027][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3845: corrupted inode contents [ 352.883754][T16244] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3845: mark_inode_dirty error [ 352.896181][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3845: corrupted inode contents [ 352.908541][T16244] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 352.917362][T16244] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3845: corrupted inode contents [ 352.929441][T16244] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.3845: mark_inode_dirty error [ 352.940819][T16244] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 352.950531][T16244] EXT4-fs (loop1): 1 truncate cleaned up [ 352.956372][T16244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.969807][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.104274][T16265] lo speed is unknown, defaulting to 1000 [ 353.110450][T16265] lo speed is unknown, defaulting to 1000 [ 353.139667][T16268] loop1: detected capacity change from 0 to 512 [ 353.215852][T16271] lo speed is unknown, defaulting to 1000 [ 353.223034][T16271] lo speed is unknown, defaulting to 1000 [ 353.323067][T16268] __quota_error: 75 callbacks suppressed [ 353.323080][T16268] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 353.339096][T16268] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 353.384881][T16269] loop0: detected capacity change from 0 to 1024 [ 353.571150][T16268] EXT4-fs (loop1): mount failed [ 353.579538][ T29] audit: type=1400 audit(354.920:11306): avc: denied { ioctl } for pid=16275 comm="syz.2.3851" path="socket:[55833]" dev="sockfs" ino=55833 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.621322][T16269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.660270][T16269] sch_fq: defrate 4294967295 ignored. [ 353.685695][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.749414][ T29] audit: type=1326 audit(355.090:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.772657][ T29] audit: type=1326 audit(355.090:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.795660][ T29] audit: type=1326 audit(355.090:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.818759][ T29] audit: type=1326 audit(355.090:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.841623][ T29] audit: type=1326 audit(355.090:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.864603][ T29] audit: type=1326 audit(355.090:11312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.877311][T16289] loop1: detected capacity change from 0 to 512 [ 353.897084][T16289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 353.906157][ T29] audit: type=1326 audit(355.090:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.929119][ T29] audit: type=1326 audit(355.090:11314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16286 comm="syz.1.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 353.929984][T16289] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm +}[@: corrupted in-inode xattr: overlapping e_value [ 353.968504][T16289] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 353.982611][T16289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.051637][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.165327][T16316] netlink: '+}[@': attribute type 4 has an invalid length. [ 354.172598][T16316] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 354.202889][T16318] lo speed is unknown, defaulting to 1000 [ 354.209083][T16318] lo speed is unknown, defaulting to 1000 [ 354.267143][T16318] loop2: detected capacity change from 0 to 512 [ 354.282799][T16318] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 354.298502][T16318] EXT4-fs (loop2): mount failed [ 355.042395][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 355.057365][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 355.355097][T16346] lo speed is unknown, defaulting to 1000 [ 355.442346][T16346] lo speed is unknown, defaulting to 1000 [ 355.873547][T16363] lo speed is unknown, defaulting to 1000 [ 355.880206][T16363] lo speed is unknown, defaulting to 1000 [ 356.181742][T16356] loop2: detected capacity change from 0 to 1024 [ 356.199342][T16380] netlink: 'syz.3.3888': attribute type 1 has an invalid length. [ 356.212232][T16356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.229740][T16380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.244451][T16380] veth13: entered promiscuous mode [ 356.252684][T16380] bond10: (slave veth13): Enslaving as a backup interface with a down link [ 356.353331][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.818104][T16394] loop0: detected capacity change from 0 to 128 [ 356.847518][T16394] bio_check_eod: 101 callbacks suppressed [ 356.847534][T16394] syz.0.3893: attempt to access beyond end of device [ 356.847534][T16394] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 356.866735][T16394] syz.0.3893: attempt to access beyond end of device [ 356.866735][T16394] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 356.880181][T16394] syz.0.3893: attempt to access beyond end of device [ 356.880181][T16394] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 356.895216][T16394] syz.0.3893: attempt to access beyond end of device [ 356.895216][T16394] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 356.908713][T16394] syz.0.3893: attempt to access beyond end of device [ 356.908713][T16394] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 356.923072][T16394] syz.0.3893: attempt to access beyond end of device [ 356.923072][T16394] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 356.936715][T16394] syz.0.3893: attempt to access beyond end of device [ 356.936715][T16394] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 356.950494][T16394] syz.0.3893: attempt to access beyond end of device [ 356.950494][T16394] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 356.964235][T16394] syz.0.3893: attempt to access beyond end of device [ 356.964235][T16394] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 356.977706][T16394] syz.0.3893: attempt to access beyond end of device [ 356.977706][T16394] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 357.012569][T16400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 357.670191][T16413] netlink: 'syz.2.3898': attribute type 1 has an invalid length. [ 357.683844][T16413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.702599][T16413] macvlan0: entered promiscuous mode [ 357.707907][T16413] macvlan0: entered allmulticast mode [ 357.714343][T16413] bond7: entered promiscuous mode [ 357.719752][T16413] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 357.727905][T16413] bond7: left promiscuous mode [ 357.947686][T16422] $Hÿ: renamed from bond0 [ 357.954809][T16422] $Hÿ: entered promiscuous mode [ 357.996196][T16423] loop2: detected capacity change from 0 to 512 [ 358.060439][T16423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.081802][T16423] EXT4-fs (loop2): 1 truncate cleaned up [ 358.088264][T16423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.841354][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 358.841368][ T29] audit: type=1400 audit(360.190:11615): avc: denied { listen } for pid=16439 comm="syz.3.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.875545][T16442] SELinux: failed to load policy [ 359.242596][ T29] audit: type=1400 audit(360.590:11616): avc: denied { read } for pid=16451 comm="syz.1.3911" path="socket:[56189]" dev="sockfs" ino=56189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.732076][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.792040][ T29] audit: type=1326 audit(361.130:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.815190][ T29] audit: type=1326 audit(361.130:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.838196][ T29] audit: type=1326 audit(361.130:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.861221][ T29] audit: type=1326 audit(361.130:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.884193][ T29] audit: type=1326 audit(361.130:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.907158][ T29] audit: type=1326 audit(361.130:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.930128][ T29] audit: type=1326 audit(361.130:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.941424][T16464] loop0: detected capacity change from 0 to 512 [ 359.953115][ T29] audit: type=1326 audit(361.130:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.0.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 359.996024][T16464] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 360.004200][T16464] EXT4-fs (loop0): orphan cleanup on readonly fs [ 360.010809][T16464] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3914: Failed to acquire dquot type 1 [ 360.051123][T16464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3914: bg 0: block 40: padding at end of block bitmap is not set [ 360.065495][T16464] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 360.075754][T16464] EXT4-fs (loop0): 1 truncate cleaned up [ 360.081810][T16464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.198216][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.227900][T16475] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 360.235690][T16475] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 360.243447][T16475] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3918'. [ 360.261375][T16474] lo speed is unknown, defaulting to 1000 [ 360.268496][T16474] lo speed is unknown, defaulting to 1000 [ 360.321966][T16476] SELinux: policydb string does not match my string SE Linux [ 360.346791][T16476] SELinux: failed to load policy [ 360.382131][T16480] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 360.389910][T16480] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 360.397624][T16480] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3918'. [ 361.067456][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3922'. [ 362.384704][T16526] netlink: 'syz.0.3933': attribute type 1 has an invalid length. [ 362.952442][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3949'. [ 363.397695][T16554] loop0: detected capacity change from 0 to 512 [ 363.439573][T16554] EXT4-fs: Ignoring removed nobh option [ 363.472974][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.3943: corrupted inode contents [ 363.541182][T16554] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.3943: mark_inode_dirty error [ 363.574943][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.3943: corrupted inode contents [ 363.576128][T16561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 363.593305][T16561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 363.601557][T16561] vhci_hcd vhci_hcd.0: Device attached [ 363.609791][T16554] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3943: mark_inode_dirty error [ 363.630126][T16554] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3943: Failed to acquire dquot type 0 [ 363.673242][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.3943: corrupted inode contents [ 363.700733][T16554] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.3943: mark_inode_dirty error [ 363.725271][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.3943: corrupted inode contents [ 363.757290][T16554] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3943: mark_inode_dirty error [ 363.788792][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.3943: corrupted inode contents [ 363.817496][T16554] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 363.827193][T16554] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.3943: corrupted inode contents [ 363.870799][T16554] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.3943: mark_inode_dirty error [ 363.884263][T16554] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 363.889771][ T6243] usb 4-1: SetAddress Request (2) to port 0 [ 363.900353][ T6243] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 363.910259][T16562] vhci_hcd: connection closed [ 363.910551][ T3687] vhci_hcd: stop threads [ 363.911523][T16554] EXT4-fs (loop0): 1 truncate cleaned up [ 363.915225][ T3687] vhci_hcd: release socket [ 363.915240][ T3687] vhci_hcd: disconnect device [ 363.934452][ T6243] usb 4-1: enqueue for inactive port 0 [ 363.940065][ T6243] usb 4-1: enqueue for inactive port 0 [ 363.945631][ T6243] usb 4-1: enqueue for inactive port 0 [ 363.951555][T16554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.980498][T16554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.097199][T16583] lo speed is unknown, defaulting to 1000 [ 364.111914][T16583] lo speed is unknown, defaulting to 1000 [ 364.209718][ T6243] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 364.261358][ T6243] usb 4-1: enqueue for inactive port 0 [ 364.285165][ T6243] usb 4-1: enqueue for inactive port 0 [ 364.290879][ T6243] usb 4-1: enqueue for inactive port 0 [ 364.714388][T16613] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 364.782655][T16613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.894297][T16613] veth15: entered promiscuous mode [ 364.901630][T16613] bond0: (slave veth15): Enslaving as a backup interface with a down link [ 365.134764][T16625] lo speed is unknown, defaulting to 1000 [ 365.192232][T16625] lo speed is unknown, defaulting to 1000 [ 365.221363][T16628] loop0: detected capacity change from 0 to 512 [ 365.263273][T16626] SELinux: policydb string does not match my string SE Linux [ 365.299326][T16626] SELinux: failed to load policy [ 365.312075][T16628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.392495][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.419298][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 365.447060][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 365.470352][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3964'. [ 365.649040][T16643] loop2: detected capacity change from 0 to 1024 [ 365.656136][T16643] EXT4-fs: Ignoring removed orlov option [ 365.671569][T16643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.710392][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 365.710408][ T29] audit: type=1326 audit(367.060:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.748818][ T29] audit: type=1326 audit(367.090:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.771934][ T29] audit: type=1326 audit(367.090:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1d89bec23 code=0x7ffc0000 [ 365.794836][ T29] audit: type=1326 audit(367.090:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1d89bec23 code=0x7ffc0000 [ 365.817778][ T29] audit: type=1326 audit(367.090:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.840859][ T29] audit: type=1326 audit(367.090:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.864227][ T29] audit: type=1326 audit(367.090:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.887294][ T29] audit: type=1326 audit(367.090:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.910426][ T29] audit: type=1326 audit(367.120:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 365.933431][ T29] audit: type=1326 audit(367.120:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.3.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 366.009805][ T6243] usb usb4-port1: attempt power cycle [ 366.428814][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.448777][T16662] loop2: detected capacity change from 0 to 128 [ 366.477617][T16662] bio_check_eod: 37 callbacks suppressed [ 366.477630][T16662] syz.2.3972: attempt to access beyond end of device [ 366.477630][T16662] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 366.496842][T16662] syz.2.3972: attempt to access beyond end of device [ 366.496842][T16662] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 366.511243][T16662] syz.2.3972: attempt to access beyond end of device [ 366.511243][T16662] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 366.526018][T16662] syz.2.3972: attempt to access beyond end of device [ 366.526018][T16662] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 366.539497][T16662] syz.2.3972: attempt to access beyond end of device [ 366.539497][T16662] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 366.552988][T16662] syz.2.3972: attempt to access beyond end of device [ 366.552988][T16662] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 366.566400][T16662] syz.2.3972: attempt to access beyond end of device [ 366.566400][T16662] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 366.580051][T16662] syz.2.3972: attempt to access beyond end of device [ 366.580051][T16662] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 366.593623][T16662] syz.2.3972: attempt to access beyond end of device [ 366.593623][T16662] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 366.607252][T16662] syz.2.3972: attempt to access beyond end of device [ 366.607252][T16662] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 366.696065][T16672] lo speed is unknown, defaulting to 1000 [ 366.703720][T16672] lo speed is unknown, defaulting to 1000 [ 367.612327][T16685] IPVS: Error connecting to the multicast addr [ 367.844301][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3979'. [ 367.853671][T16685] IPVS: Unknown mcast interface: batadv0 [ 367.971805][T16696] vlan0: entered allmulticast mode [ 367.976963][T16696] bridge_slave_0: entered allmulticast mode [ 368.081921][ T6243] usb usb4-port1: unable to enumerate USB device [ 368.139325][T16702] loop0: detected capacity change from 0 to 512 [ 368.151792][T16702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.184348][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.266241][T16708] loop0: detected capacity change from 0 to 512 [ 368.401092][T16708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.442240][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.926311][T16733] lo speed is unknown, defaulting to 1000 [ 368.933678][T16733] lo speed is unknown, defaulting to 1000 [ 368.941448][T16735] loop1: detected capacity change from 0 to 164 [ 368.961669][T16735] rock: directory entry would overflow storage [ 368.967895][T16735] rock: sig=0x66, size=4, remaining=3 [ 369.057831][T16735] rock: directory entry would overflow storage [ 369.064149][T16735] rock: sig=0x66, size=4, remaining=3 [ 369.396796][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 369.853476][T16770] loop1: detected capacity change from 0 to 512 [ 369.859876][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 369.963417][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'. [ 370.132285][T16770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.222486][T16781] lo speed is unknown, defaulting to 1000 [ 370.229180][T16781] lo speed is unknown, defaulting to 1000 [ 370.584485][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.778513][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 370.778527][ T29] audit: type=1326 audit(372.120:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 370.807755][ T29] audit: type=1326 audit(372.120:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 370.832388][ T29] audit: type=1326 audit(372.180:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 370.895002][ T29] audit: type=1326 audit(372.210:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf326bec23 code=0x7ffc0000 [ 370.917944][ T29] audit: type=1326 audit(372.210:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf326bec23 code=0x7ffc0000 [ 370.940821][ T29] audit: type=1326 audit(372.210:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 370.963769][ T29] audit: type=1326 audit(372.230:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 370.986786][ T29] audit: type=1326 audit(372.230:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 371.009804][ T29] audit: type=1326 audit(372.230:11924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 371.032757][ T29] audit: type=1326 audit(372.230:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 371.582886][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4018'. [ 371.718349][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 371.771454][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 371.966833][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 372.119808][T16831] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 372.126363][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.133802][T16831] vhci_hcd vhci_hcd.0: Device attached [ 372.141814][T16826] netlink: zone id is out of range [ 372.149972][T16826] netlink: zone id is out of range [ 372.151514][T16831] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 372.155695][T16826] netlink: zone id is out of range [ 372.161566][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.166693][T16826] netlink: zone id is out of range [ 372.179331][T16831] vhci_hcd vhci_hcd.0: Device attached [ 372.207196][T16837] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4027'. [ 372.218625][T16831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.232194][T16831] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 372.238801][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.246427][T16831] vhci_hcd vhci_hcd.0: Device attached [ 372.269691][T16831] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 372.276300][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.283975][T16831] vhci_hcd vhci_hcd.0: Device attached [ 372.309825][T16831] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 372.316500][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 372.324245][T16831] vhci_hcd vhci_hcd.0: Device attached [ 372.370366][T16854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.378916][T16853] loop1: detected capacity change from 0 to 1024 [ 372.393380][T16832] vhci_hcd: connection closed [ 372.393454][T16838] vhci_hcd: connection closed [ 372.398177][T16843] vhci_hcd: connection closed [ 372.402993][T16847] vhci_hcd: connection closed [ 372.407770][T16849] vhci_hcd: connection closed [ 372.419547][ T3679] vhci_hcd: stop threads [ 372.428508][ T3679] vhci_hcd: release socket [ 372.432977][ T3679] vhci_hcd: disconnect device [ 372.442594][ T3679] vhci_hcd: stop threads [ 372.446849][ T3679] vhci_hcd: release socket [ 372.451398][ T3679] vhci_hcd: disconnect device [ 372.466435][ T3679] vhci_hcd: stop threads [ 372.470734][ T3679] vhci_hcd: release socket [ 372.475144][ T3679] vhci_hcd: disconnect device [ 372.496639][ T3679] vhci_hcd: stop threads [ 372.500936][ T3679] vhci_hcd: release socket [ 372.505397][ T3679] vhci_hcd: disconnect device [ 372.524061][ T3679] vhci_hcd: stop threads [ 372.528353][ T3679] vhci_hcd: release socket [ 372.532791][ T3679] vhci_hcd: disconnect device [ 373.031540][T16872] syzkaller0: entered promiscuous mode [ 373.037049][T16872] syzkaller0: entered allmulticast mode [ 373.143779][T16873] tipc: Enabled bearer , priority 0 [ 373.151209][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 373.163478][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4034'. [ 373.198563][T16872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 373.230545][T16872] tipc: Resetting bearer [ 373.250262][T16869] tipc: Resetting bearer [ 373.257969][T16869] tipc: Disabling bearer [ 373.784661][T16887] SELinux: policydb string does not match my string SE Linux [ 373.796821][T16884] lo speed is unknown, defaulting to 1000 [ 373.803122][T16887] SELinux: failed to load policy [ 373.808738][T16884] lo speed is unknown, defaulting to 1000 [ 374.299285][T16901] lo speed is unknown, defaulting to 1000 [ 374.314304][T16901] lo speed is unknown, defaulting to 1000 [ 375.382903][T16915] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 375.397352][T16914] geneve3: entered promiscuous mode [ 375.403245][ T3687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.427861][ T3687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.442449][T16915] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 375.456197][ T3687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.476977][ T3687] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.486482][T16915] 8021q: adding VLAN 0 to HW filter on device bond14 [ 375.493437][ T3679] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 375.525687][T16915] veth7: entered promiscuous mode [ 375.532983][T16915] bond14: (slave veth7): Enslaving as a backup interface with a down link [ 375.563963][T16923] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4051'. [ 375.573140][T16923] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 375.580644][T16923] 0ªî{X¹¦: entered allmulticast mode [ 375.586181][T16923] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 375.627713][ T3679] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 376.245888][T16936] loop1: detected capacity change from 0 to 1024 [ 376.261390][T16936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.442157][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.739650][T16954] loop1: detected capacity change from 0 to 512 [ 376.807612][T16954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.845613][T16954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.916617][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.056488][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 377.125663][T16979] loop2: detected capacity change from 0 to 512 [ 377.132328][T16979] EXT4-fs: Ignoring removed orlov option [ 377.149809][T16979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.158241][T16979] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 377.751736][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 377.751751][ T29] audit: type=1326 audit(379.100:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 377.924090][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4075'. [ 377.945653][ T29] audit: type=1326 audit(379.100:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 377.968779][ T29] audit: type=1326 audit(379.170:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 377.991790][ T29] audit: type=1326 audit(379.170:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.014734][ T29] audit: type=1326 audit(379.170:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.037679][ T29] audit: type=1326 audit(379.170:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.060704][ T29] audit: type=1326 audit(379.170:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.083698][ T29] audit: type=1326 audit(379.170:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.106532][ T29] audit: type=1326 audit(379.170:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.129572][ T29] audit: type=1326 audit(379.170:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16991 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2274ebe9 code=0x7ffc0000 [ 378.188374][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4075'. [ 378.707440][T17007] loop2: detected capacity change from 0 to 512 [ 379.040517][T17007] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4078: casefold flag without casefold feature [ 379.578360][T17007] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4078: couldn't read orphan inode 15 (err -117) [ 379.602944][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 379.621724][T17007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.869603][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.348559][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'. [ 381.381321][ T3664] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.425233][ T3643] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.437246][ T3643] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.445485][ T3643] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.901804][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 381.931326][T17059] netlink: 'syz.1.4094': attribute type 13 has an invalid length. [ 381.942940][T17059] tipc: Resetting bearer [ 381.950306][T17059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.201247][T17082] loop2: detected capacity change from 0 to 1024 [ 382.223112][T17082] EXT4-fs: Ignoring removed bh option [ 382.375594][T17089] netlink: 'syz.4.4104': attribute type 4 has an invalid length. [ 382.383444][T17089] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4104'. [ 382.394431][T17082] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 382.406169][T17089] : renamed from  (while UP) [ 383.150836][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 383.150915][ T29] audit: type=1400 audit(383.590:12132): avc: denied { relabelfrom } for pid=17088 comm="syz.4.4104" name="NETLINK" dev="sockfs" ino=58476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 383.160006][T17082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.180711][ T29] audit: type=1400 audit(383.590:12133): avc: denied { relabelto } for pid=17088 comm="syz.4.4104" name="NETLINK" dev="sockfs" ino=58476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 383.217066][ T29] audit: type=1326 audit(384.500:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.240227][ T29] audit: type=1326 audit(384.500:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.342603][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 383.351514][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 383.357078][T17101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4102'. [ 383.371798][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 383.380679][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 383.442698][ T29] audit: type=1326 audit(384.571:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.465874][ T29] audit: type=1326 audit(384.571:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.489886][ T29] audit: type=1326 audit(384.571:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.513209][ T29] audit: type=1326 audit(384.571:12139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.513544][T17082] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 383.536534][ T29] audit: type=1326 audit(384.571:12140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.568781][ T29] audit: type=1326 audit(384.571:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.3.4103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 383.602954][T17109] netlink: 'syz.1.4108': attribute type 16 has an invalid length. [ 383.613742][T17082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.672858][T17120] tipc: New replicast peer: 255.255.255.255 [ 383.678966][T17120] tipc: Enabled bearer , priority 10 [ 383.685937][T17118] bridge0: entered allmulticast mode [ 383.745779][T17125] netlink: 53 bytes leftover after parsing attributes in process `syz.3.4116'. [ 384.276491][T17153] syzkaller0: entered promiscuous mode [ 384.282022][T17153] syzkaller0: entered allmulticast mode [ 384.586440][T17159] loop1: detected capacity change from 0 to 1024 [ 384.605349][T17159] EXT4-fs: Ignoring removed nobh option [ 384.611034][T17159] EXT4-fs: Ignoring removed nobh option [ 384.637586][T17162] loop2: detected capacity change from 0 to 2048 [ 384.652501][T17159] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 384.668392][T17164] loop0: detected capacity change from 0 to 128 [ 384.669490][T17159] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: comm syz.1.4125: inode #4294967295: comm syz.1.4125: iget: illegal inode # [ 384.699173][T17159] EXT4-fs (loop1): no journal found [ 384.699996][T17164] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 384.704510][T17159] EXT4-fs (loop1): can't get journal size [ 384.723392][T17162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.765771][T17159] EXT4-fs (loop1): failed to initialize system zone (-22) [ 384.781856][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.795703][T17159] EXT4-fs (loop1): mount failed [ 384.867775][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.883510][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'. [ 384.892797][T17175] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4132'. [ 384.914155][T17176] loop0: detected capacity change from 0 to 256 [ 384.958584][T17176] FAT-fs (loop0): Directory bread(block 64) failed [ 384.973809][T17176] FAT-fs (loop0): Directory bread(block 65) failed [ 384.981514][T17176] FAT-fs (loop0): Directory bread(block 66) failed [ 384.988290][T17176] FAT-fs (loop0): Directory bread(block 67) failed [ 385.009309][T17176] FAT-fs (loop0): Directory bread(block 68) failed [ 385.016020][T17176] FAT-fs (loop0): Directory bread(block 69) failed [ 385.022782][T17176] FAT-fs (loop0): Directory bread(block 70) failed [ 385.029362][T17176] FAT-fs (loop0): Directory bread(block 71) failed [ 385.035918][T17176] FAT-fs (loop0): Directory bread(block 72) failed [ 385.061598][T17176] FAT-fs (loop0): Directory bread(block 73) failed [ 385.113382][T17178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4131'. [ 385.783289][T17198] netlink: 'syz.4.4139': attribute type 13 has an invalid length. [ 385.800746][T17198] 0ªî{X¹¦: left allmulticast mode [ 385.807196][T17198] 0ªî{X¹¦: refused to change device tx_queue_len [ 385.841282][T17198] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 385.938274][T17210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17210 comm=syz.4.4143 [ 385.950827][T17210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17210 comm=syz.4.4143 [ 386.462173][T17225] loop0: detected capacity change from 0 to 512 [ 386.481759][T17225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.649040][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.950033][T17248] loop1: detected capacity change from 0 to 8192 [ 386.958787][T17248] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 386.966646][T17248] FAT-fs (loop1): Filesystem has been set read-only [ 387.912680][T17279] syzkaller0: entered promiscuous mode [ 387.918157][T17279] syzkaller0: entered allmulticast mode [ 387.965110][T17269] rdma_rxe: rxe_newlink: failed to add syz_tun [ 388.285783][T17291] loop0: detected capacity change from 0 to 8192 [ 388.359704][T17292] lo speed is unknown, defaulting to 1000 [ 388.366251][T17292] lo speed is unknown, defaulting to 1000 [ 388.479699][T17291] loop0: p1 p2 p3 p4 [ 388.506950][T17291] loop0: p2 start 151000334 is beyond EOD, truncated [ 388.513696][T17291] loop0: p3 start 331777 is beyond EOD, truncated [ 388.520213][T17291] loop0: p4 size 263168 extends beyond EOD, truncated [ 388.583438][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 388.583451][ T29] audit: type=1400 audit(389.921:12294): avc: denied { setopt } for pid=17294 comm="syz.2.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.696043][ T29] audit: type=1326 audit(390.041:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.759435][ T29] audit: type=1326 audit(390.041:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.782543][ T29] audit: type=1326 audit(390.071:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.792784][T17303] loop2: detected capacity change from 0 to 128 [ 388.805520][ T29] audit: type=1326 audit(390.071:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.805551][ T29] audit: type=1326 audit(390.071:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.856673][ T29] audit: type=1326 audit(390.071:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.879091][ T29] audit: type=1326 audit(390.071:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.901614][ T29] audit: type=1326 audit(390.071:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 388.924035][ T29] audit: type=1326 audit(390.071:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0380f8ebe9 code=0x7ffc0000 [ 389.109441][T17317] netlink: 'syz.0.4183': attribute type 13 has an invalid length. [ 389.149733][T17317] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 389.170401][T17317] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.178075][T17317] tipc: Resetting bearer [ 389.185513][T17317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.213254][T17319] lo speed is unknown, defaulting to 1000 [ 389.219734][T17319] lo speed is unknown, defaulting to 1000 [ 389.247904][T17321] hsr_slave_0: left promiscuous mode [ 389.259063][T17321] team0: Port device hsr_slave_0 removed [ 389.271448][T17321] macvlan2: left promiscuous mode [ 389.276586][T17321] bridge0: port 1(macvlan2) entered disabled state [ 389.297995][T17321] bond10: (slave veth13): Releasing backup interface [ 389.537095][T17334] lo speed is unknown, defaulting to 1000 [ 389.543675][T17334] lo speed is unknown, defaulting to 1000 [ 390.193121][T17347] loop2: detected capacity change from 0 to 2048 [ 390.215272][T17349] loop0: detected capacity change from 0 to 8192 [ 390.221900][T17349] msdos: Unknown parameter '' [ 390.245734][T17347] Alternate GPT is invalid, using primary GPT. [ 390.246355][T17349] siw: device registration error -23 [ 390.252077][T17347] loop2: p1 p2 p3 [ 390.304769][T17356] loop2: detected capacity change from 0 to 512 [ 390.322799][T17356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.349819][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.360623][T17367] __nla_validate_parse: 2 callbacks suppressed [ 390.360637][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 390.376318][T17366] loop0: detected capacity change from 0 to 512 [ 390.414141][T17366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 390.422319][T17366] System zones: 1-12 [ 390.426915][T17366] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.4199: error while reading EA inode 32 err=-116 [ 390.440352][T17366] EXT4-fs (loop0): Remounting filesystem read-only [ 390.446855][T17366] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 390.457079][T17366] EXT4-fs (loop0): 1 orphan inode deleted [ 390.463398][T17366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.949548][T17374] lo speed is unknown, defaulting to 1000 [ 390.955925][T17374] lo speed is unknown, defaulting to 1000 [ 391.191047][T17377] lo speed is unknown, defaulting to 1000 [ 391.249806][T17377] lo speed is unknown, defaulting to 1000 [ 392.362157][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.519930][T17411] loop1: detected capacity change from 0 to 512 [ 392.531744][T17411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.617412][T17414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4206'. [ 392.638526][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.159634][T17425] lo speed is unknown, defaulting to 1000 [ 393.166350][T17425] lo speed is unknown, defaulting to 1000 [ 393.438624][T17427] bond8: entered promiscuous mode [ 393.443998][T17427] bond8: entered allmulticast mode [ 393.507114][T17427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.526006][T17427] bond8 (unregistering): Released all slaves [ 393.532841][ T6243] Process accounting resumed [ 393.596496][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 393.596512][ T29] audit: type=1326 audit(394.941:12736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 393.625708][ T29] audit: type=1326 audit(394.941:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf3265ade9 code=0x7ffc0000 [ 393.648643][ T29] audit: type=1326 audit(394.941:12738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 393.671818][ T29] audit: type=1326 audit(394.941:12739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 393.694703][ T29] audit: type=1326 audit(394.941:12740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf3265ade9 code=0x7ffc0000 [ 393.717718][ T29] audit: type=1326 audit(394.941:12741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 393.740702][ T29] audit: type=1326 audit(394.951:12742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 393.763660][ T29] audit: type=1326 audit(394.951:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf3265ade9 code=0x7ffc0000 [ 393.786640][ T29] audit: type=1326 audit(394.951:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf326bebe9 code=0x7ffc0000 [ 393.809623][ T29] audit: type=1326 audit(394.951:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf326b5ba7 code=0x7ffc0000 [ 394.803420][T17465] pim6reg: entered allmulticast mode [ 395.722861][T17476] loop1: detected capacity change from 0 to 1024 [ 395.820447][T17476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.870483][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.143738][T17497] loop2: detected capacity change from 0 to 1024 [ 396.151728][T17497] EXT4-fs: Ignoring removed orlov option [ 396.161597][T17497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.563333][T17496] syz.2.4233 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 396.577454][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.2.4233 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 396.577484][T17496] Tainted: [W]=WARN [ 396.577490][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.577510][T17496] Call Trace: [ 396.577516][T17496] [ 396.577522][T17496] __dump_stack+0x1d/0x30 [ 396.577539][T17496] dump_stack_lvl+0xe8/0x140 [ 396.577558][T17496] dump_stack+0x15/0x1b [ 396.577582][T17496] dump_header+0x81/0x220 [ 396.577618][T17496] oom_kill_process+0x342/0x400 [ 396.577649][T17496] out_of_memory+0x979/0xb80 [ 396.577681][T17496] try_charge_memcg+0x5e6/0x9e0 [ 396.577709][T17496] obj_cgroup_charge_pages+0xa6/0x150 [ 396.577738][T17496] __memcg_kmem_charge_page+0x9f/0x170 [ 396.577833][T17496] __alloc_frozen_pages_noprof+0x188/0x360 [ 396.577866][T17496] alloc_pages_mpol+0xb3/0x250 [ 396.577898][T17496] alloc_pages_noprof+0x90/0x130 [ 396.577923][T17496] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 396.578031][T17496] __kvmalloc_node_noprof+0x30f/0x4e0 [ 396.578121][T17496] ? ip_set_alloc+0x1f/0x30 [ 396.578153][T17496] ? ip_set_alloc+0x1f/0x30 [ 396.578226][T17496] ip_set_alloc+0x1f/0x30 [ 396.578251][T17496] hash_netiface_create+0x282/0x740 [ 396.578286][T17496] ? __pfx_hash_netiface_create+0x10/0x10 [ 396.578389][T17496] ip_set_create+0x3cc/0x960 [ 396.578417][T17496] ? __nla_parse+0x40/0x60 [ 396.578496][T17496] nfnetlink_rcv_msg+0x4c3/0x590 [ 396.578597][T17496] netlink_rcv_skb+0x123/0x220 [ 396.578738][T17496] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 396.578788][T17496] nfnetlink_rcv+0x16b/0x1690 [ 396.578838][T17496] ? nlmon_xmit+0x4f/0x60 [ 396.578860][T17496] ? consume_skb+0x49/0x150 [ 396.578954][T17496] ? nlmon_xmit+0x4f/0x60 [ 396.578977][T17496] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 396.578998][T17496] ? __dev_queue_xmit+0x1200/0x2000 [ 396.579015][T17496] ? __dev_queue_xmit+0x182/0x2000 [ 396.579034][T17496] ? ref_tracker_free+0x37d/0x3e0 [ 396.579103][T17496] ? __netlink_deliver_tap+0x4dc/0x500 [ 396.579130][T17496] netlink_unicast+0x5bd/0x690 [ 396.579188][T17496] netlink_sendmsg+0x58b/0x6b0 [ 396.579267][T17496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.579288][T17496] __sock_sendmsg+0x145/0x180 [ 396.579334][T17496] ____sys_sendmsg+0x31e/0x4e0 [ 396.579427][T17496] ___sys_sendmsg+0x17b/0x1d0 [ 396.579459][T17496] __x64_sys_sendmsg+0xd4/0x160 [ 396.579547][T17496] x64_sys_call+0x191e/0x2ff0 [ 396.579570][T17496] do_syscall_64+0xd2/0x200 [ 396.579615][T17496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 396.579638][T17496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 396.579726][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.579788][T17496] RIP: 0033:0x7f94ede5ebe9 [ 396.579904][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.579918][T17496] RSP: 002b:00007f94ec8bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.579935][T17496] RAX: ffffffffffffffda RBX: 00007f94ee085fa0 RCX: 00007f94ede5ebe9 [ 396.580010][T17496] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 396.580023][T17496] RBP: 00007f94edee1e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.580033][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.580044][T17496] R13: 00007f94ee086038 R14: 00007f94ee085fa0 R15: 00007fff59f18a28 [ 396.580059][T17496] [ 396.907128][T17496] memory: usage 307200kB, limit 307200kB, failcnt 1273 [ 396.914239][T17496] memory+swap: usage 308260kB, limit 9007199254740988kB, failcnt 0 [ 396.922163][T17496] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 396.929484][T17496] Memory cgroup stats for /syz2: [ 396.931635][T17496] cache 32768 [ 396.939857][T17496] rss 20480 [ 396.943023][T17496] shmem 0 [ 396.945950][T17496] mapped_file 0 [ 396.949478][T17496] dirty 0 [ 396.952429][T17496] writeback 4096 [ 396.956005][T17496] workingset_refault_anon 4587 [ 396.960786][T17496] workingset_refault_file 1000 [ 396.965531][T17496] swap 1085440 [ 396.968883][T17496] swapcached 8192 [ 396.972513][T17496] pgpgin 446094 [ 396.975952][T17496] pgpgout 446077 [ 396.979497][T17496] pgfault 463824 [ 396.983124][T17496] pgmajfault 647 [ 396.986717][T17496] inactive_anon 20480 [ 396.990701][T17496] active_anon 0 [ 396.994191][T17496] inactive_file 0 [ 396.997792][T17496] active_file 40960 [ 397.001601][T17496] unevictable 0 [ 397.005086][T17496] hierarchical_memory_limit 314572800 [ 397.010531][T17496] hierarchical_memsw_limit 9223372036854771712 [ 397.016679][T17496] total_cache 32768 [ 397.020489][T17496] total_rss 20480 [ 397.024175][T17496] total_shmem 0 [ 397.027604][T17496] total_mapped_file 0 [ 397.031570][T17496] total_dirty 0 [ 397.034997][T17496] total_writeback 4096 [ 397.039036][T17496] total_workingset_refault_anon 4587 [ 397.044310][T17496] total_workingset_refault_file 1000 [ 397.049578][T17496] total_swap 1085440 [ 397.053468][T17496] total_swapcached 8192 [ 397.057590][T17496] total_pgpgin 446094 [ 397.061557][T17496] total_pgpgout 446077 [ 397.065600][T17496] total_pgfault 463830 [ 397.069656][T17496] total_pgmajfault 647 [ 397.073705][T17496] total_inactive_anon 20480 [ 397.078176][T17496] total_active_anon 0 [ 397.082149][T17496] total_inactive_file 0 [ 397.086272][T17496] total_active_file 40960 [ 397.090666][T17496] total_unevictable 0 [ 397.094627][T17496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4233,pid=17495,uid=0 [ 397.109301][T17496] Memory cgroup out of memory: Killed process 17495 (syz.2.4233) total-vm:95808kB, anon-rss:944kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 397.250799][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.279908][T17518] loop0: detected capacity change from 0 to 512 [ 397.293703][T17518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.313022][T17518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4241'. [ 397.333757][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.371991][T17529] 9pnet_fd: Insufficient options for proto=fd [ 397.381471][T17529] loop1: detected capacity change from 0 to 128 [ 397.389592][T17529] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.404423][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'. [ 397.421041][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 397.451743][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.538470][T17536] lo speed is unknown, defaulting to 1000 [ 397.545845][T17536] lo speed is unknown, defaulting to 1000 [ 397.606570][T17538] loop1: detected capacity change from 0 to 128 [ 398.067748][T17552] lo speed is unknown, defaulting to 1000 [ 398.081485][T17552] lo speed is unknown, defaulting to 1000 [ 398.334676][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 398.588813][T17575] lo speed is unknown, defaulting to 1000 [ 398.595717][T17575] lo speed is unknown, defaulting to 1000 [ 399.287725][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 399.287746][ T29] audit: type=1326 audit(400.551:12945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.317120][ T29] audit: type=1326 audit(400.551:12946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.340328][ T29] audit: type=1326 audit(400.551:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.363337][ T29] audit: type=1326 audit(400.551:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.386518][ T29] audit: type=1326 audit(400.551:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.409523][ T29] audit: type=1326 audit(400.551:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.432453][ T29] audit: type=1326 audit(400.561:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.455446][ T29] audit: type=1326 audit(400.561:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.478398][ T29] audit: type=1326 audit(400.561:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.501338][ T29] audit: type=1326 audit(400.561:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.3.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d89bebe9 code=0x7ffc0000 [ 399.656708][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 399.998482][T17617] veth1: entered promiscuous mode [ 400.077073][T17627] serio: Serial port ptm0 [ 400.195466][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 400.222499][T17635] loop1: detected capacity change from 0 to 512 [ 400.230309][T17635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4275: bg 0: block 16: invalid block bitmap [ 400.695465][T17635] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 400.929330][T17637] ================================================================== [ 400.937430][T17637] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 400.944719][T17637] [ 400.947029][T17637] write to 0xffff888137fd7828 of 4 bytes by task 17638 on cpu 0: [ 400.954722][T17637] touch_atime+0x1e8/0x340 [ 400.959149][T17637] shmem_file_read_iter+0x477/0x540 [ 400.964338][T17637] copy_splice_read+0x442/0x660 [ 400.969178][T17637] splice_direct_to_actor+0x290/0x680 [ 400.974544][T17637] do_splice_direct+0xda/0x150 [ 400.979290][T17637] do_sendfile+0x380/0x650 [ 400.983702][T17637] __x64_sys_sendfile64+0x105/0x150 [ 400.988902][T17637] x64_sys_call+0x2bb0/0x2ff0 [ 400.993575][T17637] do_syscall_64+0xd2/0x200 [ 400.998072][T17637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.003955][T17637] [ 401.006271][T17637] read to 0xffff888137fd7828 of 4 bytes by task 17637 on cpu 1: [ 401.013889][T17637] atime_needs_update+0x25f/0x3e0 [ 401.018916][T17637] touch_atime+0x4a/0x340 [ 401.023240][T17637] shmem_file_read_iter+0x477/0x540 [ 401.028445][T17637] copy_splice_read+0x442/0x660 [ 401.033285][T17637] splice_direct_to_actor+0x290/0x680 [ 401.038638][T17637] do_splice_direct+0xda/0x150 [ 401.043390][T17637] do_sendfile+0x380/0x650 [ 401.047807][T17637] __x64_sys_sendfile64+0x105/0x150 [ 401.053013][T17637] x64_sys_call+0x2bb0/0x2ff0 [ 401.057682][T17637] do_syscall_64+0xd2/0x200 [ 401.062182][T17637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.068067][T17637] [ 401.070374][T17637] value changed: 0x1028d057 -> 0x10c166f8 [ 401.076072][T17637] [ 401.078376][T17637] Reported by Kernel Concurrency Sanitizer on: [ 401.084511][T17637] CPU: 1 UID: 0 PID: 17637 Comm: syz.3.4273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.095872][T17637] Tainted: [W]=WARN [ 401.099657][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.109701][T17637] ================================================================== [ 401.171547][T17635] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4275: attempt to clear invalid blocks 1669132790 len 1 [ 401.193755][T17635] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4275: invalid indirect mapped block 4294967295 (level 1) [ 401.208358][T17635] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4275: invalid indirect mapped block 4294967295 (level 2) [ 401.222857][T17635] EXT4-fs (loop1): 1 truncate cleaned up [ 401.228894][T17635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.304038][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.