last executing test programs: 8m2.792761317s ago: executing program 1 (id=206): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open$dir(0x0, 0x22400, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, 0x0, 0x8000, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close(r1) 8m2.752120088s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffa, 0x2, 0xc, 0x4, 0x2, 0x8e, 0xffffffff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8m2.63403525s ago: executing program 1 (id=210): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r4, 0x0, 0x1, 0xffffff80, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000040)={0xf, 0x3a, 0x0, 0xf, 0x0, 0xb, 0x0, 0x23}) 8m0.481076522s ago: executing program 1 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1100) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r5, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 8m0.229886107s ago: executing program 1 (id=234): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r4, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ff", 0x8a}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = epoll_create1(0x0) vmsplice(r5, 0x0, 0x0, 0xa) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 7m59.848435304s ago: executing program 1 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x20) getdents(r6, &(0x7f000001fc00)=""/179, 0xb3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) 7m59.795175136s ago: executing program 32 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x20) getdents(r6, &(0x7f000001fc00)=""/179, 0xb3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) 4m24.058580934s ago: executing program 5 (id=3705): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100c75, 0x7fff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 4m24.037751603s ago: executing program 5 (id=3706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0x16) 4m23.895066946s ago: executing program 5 (id=3710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x2c53, 0x400, 0x300007, 0x115}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) io_uring_enter(r0, 0x47f9, 0x4db, 0x0, 0x0, 0x0) 4m23.817233368s ago: executing program 5 (id=3711): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000700)={[{@nodelalloc}, {@bsdgroups}, {@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0xc00, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8eee730b7ca0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]}) 4m23.69270535s ago: executing program 5 (id=3724): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 4m23.297236148s ago: executing program 5 (id=3717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r6, &(0x7f0000000380), 0x1040c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4m23.295324218s ago: executing program 33 (id=3717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r6, &(0x7f0000000380), 0x1040c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.970342042s ago: executing program 3 (id=9714): socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x6914, 0x0, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x3, 0x10000010, 0x80000000, 0x6, 0x400, 0xfffffffffffff800, 0x66c, 0x7, 0xb38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.968781442s ago: executing program 0 (id=9715): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000002c0), 0x0) sendmsg$AUDIT_USER(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "14d85d875bdc1e0dee33f61f84ecaacabc66c97b3713d038d648948d6c2f25a0116e241a7f8632b721703e0fcd2f8a99eb5bcc8b20a4623e5c5ee443313dd2789a673e3f8a32045f1c951d53e6b6690a72472bec", ["", "", "", "", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x20008881}, 0x20000884) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, r9, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.877259674s ago: executing program 0 (id=9716): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000001040)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x3029, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x4, 0x3, 0x4, 0x2}, {0x0, 0x2, 0xc, 0x3}, {0x0, 0x5, 0x5, 0x4}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x2, 0x5, 0x4}, {0x1, 0x3, 0x2, 0x2}, {0x2, 0x3, 0x9, 0xb}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x5, 0xe, 0x4}, {0x2, 0x3, 0x8, 0x4}]}, 0x94) unshare(0x2c020400) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000140), 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='rxrpc_rx_abort\x00', r2, 0x0, 0x29}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x408e, &(0x7f0000000240), 0xff, 0x43a, &(0x7f0000000340)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 1.673178228s ago: executing program 2 (id=9717): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=ANY=[@ANYBLOB="cb504ecf", @ANYRES16=r5], 0x60}, 0x1, 0x2}, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000190001002abd7000fedbdf6580209000ff110005002300000c0009000100100b", @ANYRES32=0x0, @ANYBLOB="33303c617238a5b23db4963c3493abc2cab0a5f2b0d3442d29c477149241cd61b916978ed371e02d53df8d9479dc280163dd2f0e2563e951f5c3"], 0x28}, 0x1, 0x0, 0x0, 0x24044890}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x54) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kexec_load(0x4, 0xa, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) pipe(&(0x7f0000000080)) 1.366069954s ago: executing program 3 (id=9718): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000640)=0x13) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) shutdown(r2, 0x2) 1.287790005s ago: executing program 4 (id=9719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20004800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x20000000000}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom(r4, 0x0, 0x5f, 0x40, 0x0, 0x0) 1.264078166s ago: executing program 4 (id=9720): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000b9507bb501000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)={0x14, 0x6a, 0x15, 0x8000000, 0x0, "", [@nested={0x4, 0xf8}]}, 0x14}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/158, 0x9e, 0x0, &(0x7f0000000740)=""/8, 0x8}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x44}}, 0x4000000) 1.263640616s ago: executing program 2 (id=9721): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xd32}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) personality(0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.184727938s ago: executing program 4 (id=9723): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x2e8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x160341) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.184283028s ago: executing program 2 (id=9724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 1.155944788s ago: executing program 2 (id=9725): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[], 0x56) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.114617269s ago: executing program 6 (id=9726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000079a157f9e6b2c7e69053618049f38a6b2f74905ce58ee463b7ef7f5085ae1b7afa4d3f44142d8b764a116cf6f19c17945a2e715a7a65bc70c8208a041d770e1144b57a5a77611b4ceb0cfd90edead1f7527fb960599e60676d2d48c82b65519fce1ea26544e95989b3a8d99f86c5e876f12237ced8b90aeeaf627feeff7afda3e439dd53c70e22ceaa0eb4a625a4e0b36c216fc80aea1a57eb9274af3538cda51293fd2440fb51c5921ca4cd1311d853d5c316", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000001f00)=""/50, 0x32}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = accept4(r2, &(0x7f0000000100)=@l2, &(0x7f0000000040)=0x80, 0x800) setresgid(0xee00, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{0xb35f, 0x0, 0x10, 0xe70a}, {0x2, 0x6, 0x63, 0x2}, {0x8000, 0x0, 0x7, 0x2}, {0x2, 0xeb, 0x7d, 0xffffffff}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000003a0d000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000dbf09000000000000550100000000000095000000000000001f6af0fffcffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) unshare(0x2040400) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 1.03130392s ago: executing program 0 (id=9727): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x8, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3, 0x401, 0x3, 0x20075, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x4000004) lseek(r2, 0x80000000, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 983.646601ms ago: executing program 0 (id=9728): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfff, 0xfff, 0x0, 0x8f, 0x6, "db808925e4ab265b24c51a9bd89ac82799703c", 0x4, 0x21}) r1 = socket(0x10, 0x3, 0x0) getgroups(0x1, &(0x7f0000007780)=[0xffffffffffffffff]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x80000) epoll_pwait2(r3, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x404c080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 879.058974ms ago: executing program 6 (id=9729): socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x6914, 0x0, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x3, 0x10000010, 0x80000000, 0x6, 0x400, 0xfffffffffffff800, 0x66c, 0x7, 0xb38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 650.320238ms ago: executing program 3 (id=9730): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=ANY=[@ANYBLOB="cb504ecf", @ANYRES16=r5, @ANYBLOB="3107000000000000000038000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x60}, 0x1, 0x2}, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000190001002abd7000fedbdf6580209000ff110005002300000c0009000100100b", @ANYRES32=0x0, @ANYBLOB="33303c617238a5b23db4963c3493abc2cab0a5f2b0d3442d29c477149241cd61b916978ed371e02d53df8d9479dc280163dd2f0e2563e951f5c3"], 0x28}, 0x1, 0x0, 0x0, 0x24044890}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x54) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kexec_load(0x4, 0xa, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) pipe(&(0x7f0000000080)) 649.754298ms ago: executing program 6 (id=9731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 490.473721ms ago: executing program 6 (id=9732): ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000840)) stat(&(0x7f0000000980)='.\x00', &(0x7f0000000cc0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xffffff09) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x11, 0x3, 0x8003) socket(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 489.700181ms ago: executing program 3 (id=9733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000340)="c19adebbf912cb3d95f40c0486e21ec7b8b0d956b44a944a65a9ca0409f2d198d47764430c43f0905adda3423cd8e77edf03fa3c9f6689da05aa234a92ed51c77b8d0c9266b5cef563a16c5d8353f89cd88ab31baa124747de4a35853fc2a2105c3d4b5b8c6cfade997dd5b227e51bd764d184e3eb5634a79c9834158872ee3a955636f150a11aec85df70f9b64fd154d785aee64b1a21b596bee91a071bd5344c857b7e6cbbf88749bd1a59d067a28574db25c6c2f43e104018e61241642a72f6894fa67120065d3608a7cec2cbea4b61", &(0x7f0000000180)=@udp6=r5, 0x1}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 453.530872ms ago: executing program 6 (id=9734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x10, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0xff5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 385.273113ms ago: executing program 3 (id=9735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x2, 0x3, 0x88, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000640)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@dont_measure}]}, 0xfe, 0x478, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_rr_get_interval(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0x1, @mcast1, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004844) 385.066243ms ago: executing program 4 (id=9736): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) sendmsg$key(r1, 0x0, 0x20000086) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 384.831673ms ago: executing program 3 (id=9737): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1, 0x0, 0x18}, 0x40000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000000d027602833daf31518000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r2, 0x0, 0x2) ioperm(0x1, 0x9, 0xfffffffffffffff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 367.309934ms ago: executing program 4 (id=9738): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) stat(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") lstat(&(0x7f0000000440)='./file0\x00', 0x0) 302.309555ms ago: executing program 4 (id=9739): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r4, 0x5) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 148.957728ms ago: executing program 6 (id=9740): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000080000000c0000000000000089a93f2a0084b079f53b17efddad15660890d83bf1bd7515a732200f284b3996da666264510ff98ec22706522fd5b19e2c81795fd69d730d5d8a8e3434eead2b936af8ecd357539352424726d8177b2ec198c984e38f76a6b2d5489713b8f4fa327e8c341a767e14a7bd7ca25a3df6f1768197576a3483b6e3d3bf6b6079b2430d36a4c6373b1c6cfb8ebbc91a8965f802b16d9825971aae99b4bcf2cee1bc7dd68a67442dfbbc5dff2df26834116fdffaecd2285e8d3f880fb9df03cc261c573571b842f8d0efce2ea11c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) 148.749288ms ago: executing program 0 (id=9741): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) 125.014098ms ago: executing program 0 (id=9742): bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) listen(r2, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 96.560509ms ago: executing program 2 (id=9743): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00"], 0x7c8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 2 (id=9744): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x4e, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) kernel console output (not intermixed with test programs): COUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 464.531105][T24287] CPU: 1 UID: 0 PID: 24287 Comm: syz.6.7936 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.531136][T24287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.531147][T24287] Call Trace: [ 464.531154][T24287] [ 464.531162][T24287] __dump_stack+0x1d/0x30 [ 464.531183][T24287] dump_stack_lvl+0xe8/0x140 [ 464.531202][T24287] dump_stack+0x15/0x1b [ 464.531233][T24287] dump_header+0x81/0x220 [ 464.531306][T24287] oom_kill_process+0x342/0x400 [ 464.531367][T24287] out_of_memory+0x979/0xb80 [ 464.531397][T24287] try_charge_memcg+0x5e6/0x9e0 [ 464.531505][T24287] obj_cgroup_charge_pages+0xa6/0x150 [ 464.531541][T24287] __memcg_kmem_charge_page+0x9f/0x170 [ 464.531570][T24287] __alloc_frozen_pages_noprof+0x188/0x360 [ 464.531618][T24287] alloc_pages_mpol+0xb3/0x250 [ 464.531656][T24287] alloc_pages_noprof+0x90/0x130 [ 464.531691][T24287] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 464.531729][T24287] __kvmalloc_node_noprof+0x30f/0x4e0 [ 464.531798][T24287] ? ip_set_alloc+0x1f/0x30 [ 464.531816][T24287] ? ip_set_alloc+0x1f/0x30 [ 464.531840][T24287] ip_set_alloc+0x1f/0x30 [ 464.531931][T24287] hash_netiface_create+0x282/0x740 [ 464.531952][T24287] ? __pfx_hash_netiface_create+0x10/0x10 [ 464.531972][T24287] ip_set_create+0x3c9/0x960 [ 464.532087][T24287] ? __nla_parse+0x40/0x60 [ 464.532168][T24287] nfnetlink_rcv_msg+0x4c3/0x590 [ 464.532259][T24287] netlink_rcv_skb+0x123/0x220 [ 464.532284][T24287] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 464.532313][T24287] nfnetlink_rcv+0x16b/0x1690 [ 464.532352][T24287] ? nlmon_xmit+0x4f/0x60 [ 464.532379][T24287] ? consume_skb+0x49/0x150 [ 464.532417][T24287] ? nlmon_xmit+0x4f/0x60 [ 464.532444][T24287] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 464.532468][T24287] ? __dev_queue_xmit+0x1200/0x2000 [ 464.532543][T24287] ? __dev_queue_xmit+0x182/0x2000 [ 464.532565][T24287] ? mas_wr_preallocate+0x304/0x410 [ 464.532601][T24287] ? ref_tracker_free+0x37d/0x3e0 [ 464.532633][T24287] ? __netlink_deliver_tap+0x4dc/0x500 [ 464.532679][T24287] netlink_unicast+0x5bd/0x690 [ 464.532700][T24287] netlink_sendmsg+0x58b/0x6b0 [ 464.532746][T24287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.532769][T24287] __sock_sendmsg+0x142/0x180 [ 464.532805][T24287] ____sys_sendmsg+0x31e/0x4e0 [ 464.532861][T24287] ___sys_sendmsg+0x17b/0x1d0 [ 464.532899][T24287] __x64_sys_sendmsg+0xd4/0x160 [ 464.532941][T24287] x64_sys_call+0x191e/0x2ff0 [ 464.532965][T24287] do_syscall_64+0xd2/0x200 [ 464.533066][T24287] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 464.533089][T24287] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 464.533172][T24287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.533198][T24287] RIP: 0033:0x7fec9879ebe9 [ 464.533217][T24287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.533233][T24287] RSP: 002b:00007fec97207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.533253][T24287] RAX: ffffffffffffffda RBX: 00007fec989d5fa0 RCX: 00007fec9879ebe9 [ 464.533265][T24287] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 464.533293][T24287] RBP: 00007fec98821e19 R08: 0000000000000000 R09: 0000000000000000 [ 464.533306][T24287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.533371][T24287] R13: 00007fec989d6038 R14: 00007fec989d5fa0 R15: 00007ffebe2bee28 [ 464.533389][T24287] [ 464.533396][T24287] memory: usage 307200kB, limit 307200kB, failcnt 3995 [ 464.563557][ T29] audit: type=1400 audit(2530.635:63491): avc: denied { read write } for pid=24309 comm="syz.2.7948" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 464.564290][T24287] memory+swap: usage 324844kB, limit 9007199254740988kB, failcnt 0 [ 464.568884][ T29] audit: type=1400 audit(2530.635:63492): avc: denied { open } for pid=24309 comm="syz.2.7948" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 464.573047][T24287] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 464.933919][T24287] Memory cgroup stats for /syz6: [ 464.934627][T24287] cache 0 [ 464.942522][T24287] rss 0 [ 464.945321][T24287] shmem 0 [ 464.948255][T24287] mapped_file 0 [ 464.951760][T24287] dirty 0 [ 464.954732][T24287] writeback 0 [ 464.958026][T24287] workingset_refault_anon 159 [ 464.962768][T24287] workingset_refault_file 0 [ 464.967313][T24287] swap 18067456 [ 464.970785][T24287] swapcached 12288 [ 464.974540][T24287] pgpgin 339773 [ 464.978011][T24287] pgpgout 339770 [ 464.981566][T24287] pgfault 346578 [ 464.985408][T24287] pgmajfault 96 [ 464.988893][T24287] inactive_anon 0 [ 464.992601][T24287] active_anon 12288 [ 464.995886][ T29] audit: type=1326 audit(2531.086:63493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 464.996449][T24287] inactive_file 0 [ 464.996461][T24287] active_file 0 [ 465.023829][ T29] audit: type=1326 audit(2531.118:63494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.026609][T24287] unevictable 0 [ 465.026627][T24287] hierarchical_memory_limit 314572800 [ 465.050185][ T29] audit: type=1326 audit(2531.118:63495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.053208][T24287] hierarchical_memsw_limit 9223372036854771712 [ 465.053219][T24287] total_cache 0 [ 465.058734][ T29] audit: type=1326 audit(2531.118:63496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.081745][T24287] total_rss 0 [ 465.081754][T24287] total_shmem 0 [ 465.081761][T24287] total_mapped_file 0 [ 465.081769][T24287] total_dirty 0 [ 465.081777][T24287] total_writeback 0 [ 465.081785][T24287] total_workingset_refault_anon 159 [ 465.081794][T24287] total_workingset_refault_file 0 [ 465.081857][T24287] total_swap 18067456 [ 465.081863][T24287] total_swapcached 12288 [ 465.081881][T24287] total_pgpgin 339773 [ 465.081889][T24287] total_pgpgout 339770 [ 465.081913][T24287] total_pgfault 346578 [ 465.081920][T24287] total_pgmajfault 96 [ 465.081927][T24287] total_inactive_anon 0 [ 465.081934][T24287] total_active_anon 12288 [ 465.081942][T24287] total_inactive_file 0 [ 465.081950][T24287] total_active_file 0 [ 465.081959][T24287] total_unevictable 0 [ 465.081967][T24287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7936,pid=24286,uid=0 [ 465.082118][T24287] Memory cgroup out of memory: Killed process 24286 (syz.6.7936) total-vm:95876kB, anon-rss:1008kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 465.223072][ T29] audit: type=1326 audit(2531.118:63497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.246708][ T29] audit: type=1326 audit(2531.118:63498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.270363][ T29] audit: type=1326 audit(2531.118:63499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.3.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 465.477035][T24350] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 465.583168][T24364] netlink: 'syz.6.7970': attribute type 3 has an invalid length. [ 465.601082][T24343] can0: slcan on ttyS3. [ 465.649013][T24343] can0 (unregistered): slcan off ttyS3. [ 465.747910][T24390] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 466.288976][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8032'. [ 466.376808][T24519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8041'. [ 466.486951][T24536] lo speed is unknown, defaulting to 1000 [ 466.492965][T24536] lo speed is unknown, defaulting to 1000 [ 466.536129][T24536] lo speed is unknown, defaulting to 1000 [ 466.631536][T24552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8057'. [ 466.660356][T24552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8057'. [ 466.690615][ T3407] hid_parser_main: 30 callbacks suppressed [ 466.690635][ T3407] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 466.704957][ T3407] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 466.722236][ T3407] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 466.731371][ T3407] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 466.770242][T24573] buffer_io_error: 20 callbacks suppressed [ 466.770302][T24573] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.800702][T24573] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.806032][T24574] smc: net device bond0 erased user defined pnetid SYZ0 [ 466.816491][T24573] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.832203][T24573] Buffer I/O error on dev loop9, logical block 0, async page read [ 467.107210][T24602] syz!: rxe_newlink: already configured on team_slave_0 [ 467.126102][T24606] can0: slcan on ttyS3. [ 467.210892][T24606] can0 (unregistered): slcan off ttyS3. [ 467.216968][T24606] Falling back ldisc for ttyS3. [ 467.357580][T24619] SELinux: failed to load policy [ 467.589896][T24646] SELinux: failed to load policy [ 467.767729][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8103'. [ 467.963612][T24685] lo speed is unknown, defaulting to 1000 [ 467.969891][T24685] lo speed is unknown, defaulting to 1000 [ 468.026027][T24685] lo speed is unknown, defaulting to 1000 [ 468.202319][T24711] serio: Serial port ttyS3 [ 468.327944][T24732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8134'. [ 468.353727][T24738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8137'. [ 468.843000][T24783] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 468.941901][T24794] syz!: rxe_newlink: already configured on team_slave_0 [ 469.196553][T24823] lo speed is unknown, defaulting to 1000 [ 469.202995][T24823] lo speed is unknown, defaulting to 1000 [ 469.232025][T24823] lo speed is unknown, defaulting to 1000 [ 469.280743][T24826] block device autoloading is deprecated and will be removed. [ 469.299514][ T29] kauditd_printk_skb: 1710 callbacks suppressed [ 469.299530][ T29] audit: type=1400 audit(2535.602:65210): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 469.329819][ T29] audit: type=1400 audit(2535.602:65211): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 469.352675][ T29] audit: type=1400 audit(2535.602:65212): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=738 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 469.377078][ T29] audit: type=1326 audit(2535.644:65213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0118db5ba7 code=0x7ffc0000 [ 469.394717][T24829] syz!: rxe_newlink: already configured on team_slave_0 [ 469.400117][ T29] audit: type=1326 audit(2535.644:65214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0118d5adb9 code=0x7ffc0000 [ 469.400149][ T29] audit: type=1326 audit(2535.644:65215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0118db5ba7 code=0x7ffc0000 [ 469.453514][ T29] audit: type=1326 audit(2535.644:65216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0118d5adb9 code=0x7ffc0000 [ 469.476508][ T29] audit: type=1326 audit(2535.644:65217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0118db5ba7 code=0x7ffc0000 [ 469.499483][ T29] audit: type=1326 audit(2535.644:65218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0118d5adb9 code=0x7ffc0000 [ 469.522545][ T29] audit: type=1326 audit(2535.644:65219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24827 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0118db5ba7 code=0x7ffc0000 [ 469.675249][T24855] loop0: detected capacity change from 0 to 512 [ 469.708181][T24859] IPv6: Can't replace route, no match found [ 469.716625][T24855] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8180: bg 0: block 248: padding at end of block bitmap is not set [ 469.716768][T24862] syzkaller0: refused to change device tx_queue_len [ 469.748511][T24855] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.8180: Failed to acquire dquot type 1 [ 469.760850][T24855] EXT4-fs (loop0): 1 truncate cleaned up [ 469.767426][T24855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.813581][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.824744][T12019] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 1 [ 469.845594][T24874] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 470.027713][T24898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8198'. [ 470.057551][T24900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8199'. [ 470.097698][T24909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24909 comm=syz.3.8203 [ 470.234605][T24925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8211'. [ 470.245489][T24916] lo speed is unknown, defaulting to 1000 [ 470.265669][T24916] lo speed is unknown, defaulting to 1000 [ 470.346133][T24916] lo speed is unknown, defaulting to 1000 [ 470.888670][T24986] loop0: detected capacity change from 0 to 128 [ 470.974937][T24997] syz.0.8238: attempt to access beyond end of device [ 470.974937][T24997] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 471.016986][T24997] syz.0.8238: attempt to access beyond end of device [ 471.016986][T24997] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 471.071185][T24997] syz.0.8238: attempt to access beyond end of device [ 471.071185][T24997] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 471.110205][T24997] syz.0.8238: attempt to access beyond end of device [ 471.110205][T24997] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 471.142747][T24997] syz.0.8238: attempt to access beyond end of device [ 471.142747][T24997] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 471.178205][T24997] syz.0.8238: attempt to access beyond end of device [ 471.178205][T24997] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 471.210585][T24997] syz.0.8238: attempt to access beyond end of device [ 471.210585][T24997] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 471.266680][T24997] syz.0.8238: attempt to access beyond end of device [ 471.266680][T24997] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 471.304469][T24997] syz.0.8238: attempt to access beyond end of device [ 471.304469][T24997] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 471.336469][T24997] syz.0.8238: attempt to access beyond end of device [ 471.336469][T24997] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 471.424069][T25025] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 471.481637][T25034] netlink: 'syz.0.8259': attribute type 9 has an invalid length. [ 471.728050][T25058] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 471.785154][T25062] loop0: detected capacity change from 0 to 512 [ 471.809240][T25062] EXT4-fs: Ignoring removed nobh option [ 471.826302][T25062] EXT4-fs (loop0): failed to initialize system zone (-117) [ 471.837924][T25062] EXT4-fs (loop0): mount failed [ 471.901977][T25062] SELinux: failed to load policy [ 472.035802][T25077] loop0: detected capacity change from 0 to 1024 [ 472.045179][T25077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.061913][T25081] futex_wake_op: syz.3.8279 tries to shift op by -1; fix this program [ 472.082517][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.104471][T25088] loop0: detected capacity change from 0 to 1024 [ 472.114940][T25088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.131095][T25088] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.8281: lblock 0 mapped to illegal pblock 0 (length 1) [ 472.144710][T25088] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 472.157707][T25088] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.157707][T25088] [ 472.169160][T25088] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.8281: lblock 3 mapped to illegal pblock 3 (length 3) [ 472.184386][T25088] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 472.196890][T25088] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.196890][T25088] [ 472.227804][T12019] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:62: lblock 4 mapped to illegal pblock 4 (length 2) [ 472.249454][T12019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 472.261816][T12019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.261816][T12019] [ 472.293173][T11985] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 472.310802][T11985] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 472.323161][T11985] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.323161][T11985] [ 472.332966][T11985] EXT4-fs (loop0): Total free blocks count 0 [ 472.351896][T25112] loop0: detected capacity change from 0 to 128 [ 472.360408][T25112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 472.368844][T25112] FAT-fs (loop0): Filesystem has been set read-only [ 472.375649][T25112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 472.383683][T25112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 472.410865][T25118] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 472.468256][T25130] loop0: detected capacity change from 0 to 1024 [ 472.487303][T25130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.487438][T25133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8299'. [ 472.519915][T25130] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.8298: Abort forced by user [ 472.532366][T25130] EXT4-fs (loop0): Remounting filesystem read-only [ 472.538916][T25130] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 472.558011][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.850554][T25151] can0: slcan on ttyS3. [ 472.884636][T25151] can0 (unregistered): slcan off ttyS3. [ 473.073634][T25160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8308'. [ 473.082911][T25160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8308'. [ 473.283783][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.300891][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.324074][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.334941][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.354060][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.382366][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8314'. [ 473.437290][T25188] loop0: detected capacity change from 0 to 1024 [ 473.444124][T25188] EXT4-fs: Ignoring removed nobh option [ 473.485718][T25188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.516970][T25195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8320'. [ 473.531836][T25195] netem: change failed [ 473.537591][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.569292][T25197] loop0: detected capacity change from 0 to 512 [ 473.601340][T25197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.631928][T25205] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.745628][T25212] 0ªî{X¹¦: left allmulticast mode [ 473.776307][T25212] hsr_slave_0: left promiscuous mode [ 473.807281][T25212] veth7: left promiscuous mode [ 473.933231][T25233] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 474.004430][T25241] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 474.087541][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 474.087582][ T29] audit: type=1400 audit(2540.633:65845): avc: denied { name_connect } for pid=25251 comm="syz.3.8344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 474.276517][ T29] audit: type=1326 audit(2540.822:65846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.284737][T25271] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 474.299843][ T29] audit: type=1326 audit(2540.822:65847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.345731][ T29] audit: type=1326 audit(2540.833:65848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.369477][ T29] audit: type=1326 audit(2540.833:65849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.393067][ T29] audit: type=1326 audit(2540.833:65850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.416218][ T29] audit: type=1326 audit(2540.833:65851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.439433][ T29] audit: type=1326 audit(2540.833:65852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.462963][ T29] audit: type=1326 audit(2540.833:65853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.486383][ T29] audit: type=1326 audit(2540.833:65854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25270 comm="syz.6.8351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 474.526000][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.597205][T25292] syz!: rxe_newlink: already configured on team_slave_0 [ 474.718482][T25306] bond2: left promiscuous mode [ 474.723936][T25306] bond2: left allmulticast mode [ 474.730216][T25306] veth9: left promiscuous mode [ 474.749699][T25316] syz!: rxe_newlink: already configured on team_slave_0 [ 474.864758][T25337] loop0: detected capacity change from 0 to 128 [ 474.904112][T25339] syz!: rxe_newlink: already configured on team_slave_0 [ 475.034537][T25346] loop0: detected capacity change from 0 to 512 [ 475.048113][T25346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.061573][T25346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.358736][T25382] loop0: detected capacity change from 0 to 1024 [ 475.381209][T25382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.398497][T25382] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.8398: Allocating blocks 385-513 which overlap fs metadata [ 475.414302][T25382] EXT4-fs (loop0): pa ffff8881071878c0: logic 16, phys. 129, len 24 [ 475.423093][T25382] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 475.449115][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.538613][T25395] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.744130][T25419] SELinux: failed to load policy [ 476.105607][T25446] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 476.176055][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.183649][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.191357][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.202413][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.210217][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.217676][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.225247][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.233339][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.240816][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.248265][ T4735] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 476.268928][ T4735] hid-generic 0000:0000:0000.001B: hidraw0: HID v8.00 Device [syz0] on syz1 [ 476.754919][T25508] syz!: rxe_newlink: already configured on team_slave_0 [ 476.865082][T25527] IPv6: Can't replace route, no match found [ 476.903681][T25531] random: crng reseeded on system resumption [ 477.104983][T25551] syz!: rxe_newlink: already configured on team_slave_0 [ 477.236793][T25557] ip6gre1: entered allmulticast mode [ 477.687387][T25599] +}[@: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 477.701502][T25599] CPU: 1 UID: 0 PID: 25599 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 477.701528][T25599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.701557][T25599] Call Trace: [ 477.701563][T25599] [ 477.701571][T25599] __dump_stack+0x1d/0x30 [ 477.701595][T25599] dump_stack_lvl+0xe8/0x140 [ 477.701617][T25599] dump_stack+0x15/0x1b [ 477.701635][T25599] warn_alloc+0x12b/0x1a0 [ 477.701752][T25599] __vmalloc_node_range_noprof+0x9c/0xe00 [ 477.701789][T25599] ? __rcu_read_unlock+0x4f/0x70 [ 477.701812][T25599] ? avc_has_perm_noaudit+0x1b1/0x200 [ 477.701844][T25599] vmalloc_user_noprof+0x7d/0xb0 [ 477.702029][T25599] ? xskq_create+0x80/0xe0 [ 477.702050][T25599] xskq_create+0x80/0xe0 [ 477.702071][T25599] xsk_init_queue+0x95/0xf0 [ 477.702091][T25599] xsk_setsockopt+0x477/0x640 [ 477.702148][T25599] ? __pfx_xsk_setsockopt+0x10/0x10 [ 477.702194][T25599] __sys_setsockopt+0x181/0x200 [ 477.702263][T25599] __x64_sys_setsockopt+0x64/0x80 [ 477.702287][T25599] x64_sys_call+0x20ec/0x2ff0 [ 477.702309][T25599] do_syscall_64+0xd2/0x200 [ 477.702420][T25599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 477.702446][T25599] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 477.702476][T25599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.702578][T25599] RIP: 0033:0x7f7d7e92ebe9 [ 477.702595][T25599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.702612][T25599] RSP: 002b:00007f7d7d397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.702677][T25599] RAX: ffffffffffffffda RBX: 00007f7d7eb65fa0 RCX: 00007f7d7e92ebe9 [ 477.702691][T25599] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 477.702705][T25599] RBP: 00007f7d7e9b1e19 R08: 0000000000000004 R09: 0000000000000000 [ 477.702719][T25599] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 477.702732][T25599] R13: 00007f7d7eb66038 R14: 00007f7d7eb65fa0 R15: 00007ffcfbd26348 [ 477.702753][T25599] [ 477.902352][T25599] Mem-Info: [ 477.905500][T25599] active_anon:14452 inactive_anon:24 isolated_anon:0 [ 477.905500][T25599] active_file:9568 inactive_file:3230 isolated_file:0 [ 477.905500][T25599] unevictable:0 dirty:103 writeback:0 [ 477.905500][T25599] slab_reclaimable:5079 slab_unreclaimable:81775 [ 477.905500][T25599] mapped:29073 shmem:5552 pagetables:2238 [ 477.905500][T25599] sec_pagetables:0 bounce:0 [ 477.905500][T25599] kernel_misc_reclaimable:0 [ 477.905500][T25599] free:1752824 free_pcp:30320 free_cma:0 [ 477.950761][T25599] Node 0 active_anon:57808kB inactive_anon:96kB active_file:38272kB inactive_file:12920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116292kB dirty:412kB writeback:0kB shmem:22208kB kernel_stack:4960kB pagetables:8952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 477.978419][T25599] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.007091][T25599] lowmem_reserve[]: 0 2883 7862 7862 [ 478.012628][T25599] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 478.042702][T25599] lowmem_reserve[]: 0 0 4978 4978 [ 478.047981][T25599] Node 0 Normal free:4055096kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45680kB inactive_anon:92kB active_file:38272kB inactive_file:12920kB unevictable:0kB writepending:468kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:122148kB local_pcp:83740kB free_cma:0kB [ 478.080292][T25599] lowmem_reserve[]: 0 0 0 0 [ 478.084948][T25599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 478.097915][T25599] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 478.114128][T25599] Node 0 Normal: 3695*4kB (UME) 2394*8kB (UM) 1459*16kB (UME) 1043*32kB (UME) 694*64kB (UM) 346*128kB (UME) 134*256kB (ME) 277*512kB (UME) 267*1024kB (UM) 69*2048kB (UME) 802*4096kB (UM) = 4055196kB [ 478.134081][T25599] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 478.143429][T25599] 15353 total pagecache pages [ 478.148132][T25599] 50 pages in swap cache [ 478.152419][T25599] Free swap = 103788kB [ 478.156675][T25599] Total swap = 124996kB [ 478.160874][T25599] 2097051 pages RAM [ 478.164832][T25599] 0 pages HighMem/MovableOnly [ 478.169548][T25599] 80446 pages reserved [ 478.328379][T25629] __nla_validate_parse: 9 callbacks suppressed [ 478.328397][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8497'. [ 478.330191][T25610] can0: slcan on ttyS3. [ 478.388711][T25610] can0 (unregistered): slcan off ttyS3. [ 478.482059][T25639] netlink: 'syz.0.8504': attribute type 1 has an invalid length. [ 478.512333][T25641] syz!: rxe_newlink: already configured on team_slave_0 [ 478.703281][T25643] loop0: detected capacity change from 0 to 512 [ 478.712672][T25643] EXT4-fs (loop0): too many log groups per flexible block group [ 478.720460][T25643] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 478.728330][T25643] EXT4-fs (loop0): mount failed [ 478.917275][ T29] kauditd_printk_skb: 1153 callbacks suppressed [ 478.917293][ T29] audit: type=1400 audit(2545.706:67008): avc: denied { setopt } for pid=25661 comm="syz.0.8513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.038426][ T29] audit: type=1326 audit(2545.832:67009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.065866][ T29] audit: type=1326 audit(2545.864:67010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.089143][ T29] audit: type=1326 audit(2545.864:67011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.112972][ T29] audit: type=1326 audit(2545.864:67012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.136025][ T29] audit: type=1326 audit(2545.864:67013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.159683][ T29] audit: type=1326 audit(2545.864:67014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.182746][ T29] audit: type=1326 audit(2545.864:67015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.206629][ T29] audit: type=1326 audit(2545.864:67016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.230246][ T29] audit: type=1326 audit(2545.864:67017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25669 comm="syz.2.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 479.416014][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8530'. [ 479.449437][T25708] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 479.957944][T25735] loop0: detected capacity change from 0 to 2048 [ 479.997976][T25735] loop0: p1 < > p4 [ 480.002545][T25735] loop0: p4 size 8388608 extends beyond EOD, truncated [ 480.548192][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8560'. [ 481.128619][T25816] syz!: rxe_newlink: already configured on team_slave_0 [ 481.327434][T25827] hub 6-0:1.0: USB hub found [ 481.332230][T25827] hub 6-0:1.0: 8 ports detected [ 481.496215][T25841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8588'. [ 481.506811][T25839] loop0: detected capacity change from 0 to 1024 [ 481.532244][T25839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.547422][T25839] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.8587: Allocating blocks 385-513 which overlap fs metadata [ 481.563265][T25839] EXT4-fs (loop0): pa ffff888107187930: logic 16, phys. 129, len 24 [ 481.571842][T25839] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 481.608323][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.623219][T25849] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 481.712803][T25864] netlink: 'syz.3.8595': attribute type 4 has an invalid length. [ 481.722465][T25864] netlink: 'syz.3.8595': attribute type 4 has an invalid length. [ 481.944813][T25888] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.011259][T25896] uprobe: syz.6.8609:25896 failed to unregister, leaking uprobe [ 482.099073][T25909] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.124204][T25915] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 482.189639][T25924] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.292099][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.301290][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.337599][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.346734][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.396666][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.405699][T25941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8625'. [ 482.668654][T25971] loop0: detected capacity change from 0 to 512 [ 482.675531][T25971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 482.687286][T25971] EXT4-fs (loop0): 1 truncate cleaned up [ 482.693675][T25971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.846459][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.885461][T25985] netlink: 'syz.0.8646': attribute type 1 has an invalid length. [ 482.893349][T25985] netlink: 'syz.0.8646': attribute type 2 has an invalid length. [ 482.968558][T25990] syz!: rxe_newlink: already configured on team_slave_0 [ 483.204461][T26010] __nla_validate_parse: 1 callbacks suppressed [ 483.204539][T26010] netlink: 830 bytes leftover after parsing attributes in process `syz.6.8657'. [ 483.316904][T25998] can0: slcan on ttyS3. [ 483.368966][T25998] can0 (unregistered): slcan off ttyS3. [ 483.596730][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8674'. [ 483.694922][T26069] loop0: detected capacity change from 0 to 2048 [ 483.723827][T26069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.965339][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 483.965358][ T29] audit: type=1400 audit(2551.000:67517): avc: denied { map } for pid=26083 comm="syz.2.8685" path="socket:[80599]" dev="sockfs" ino=80599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.263385][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.158072][ T29] audit: type=1326 audit(2552.250:67518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 485.181379][ T29] audit: type=1326 audit(2552.250:67519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 485.204521][ T29] audit: type=1326 audit(2552.250:67520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d7e92d550 code=0x7ffc0000 [ 485.227615][ T29] audit: type=1326 audit(2552.250:67521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7d7e930417 code=0x7ffc0000 [ 485.250755][ T29] audit: type=1326 audit(2552.250:67522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 485.273998][ T29] audit: type=1326 audit(2552.250:67523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7d7e930417 code=0x7ffc0000 [ 485.297101][ T29] audit: type=1326 audit(2552.250:67524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d7e92d84a code=0x7ffc0000 [ 485.320044][ T29] audit: type=1326 audit(2552.250:67525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 485.341205][T26113] can0: slcan on ttyS3. [ 485.343123][ T29] audit: type=1326 audit(2552.250:67526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.2.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 485.443317][T26113] can0 (unregistered): slcan off ttyS3. [ 485.624902][ T4735] page_pool_release_retry() stalled pool shutdown: id 57, 48 inflight 302 sec [ 485.689201][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8707'. [ 485.720794][T26141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8707'. [ 485.765273][T26153] loop0: detected capacity change from 0 to 128 [ 485.789469][T26153] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.831969][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.866053][T26165] tipc: New replicast peer: 255.255.255.255 [ 485.872163][T26165] tipc: Enabled bearer , priority 10 [ 486.031762][T26187] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8725'. [ 486.061319][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8726'. [ 486.120078][T26192] syz!: rxe_newlink: already configured on team_slave_0 [ 486.393370][T26197] can0: slcan on ttyS3. [ 486.442615][T26197] can0 (unregistered): slcan off ttyS3. [ 486.689960][T26222] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 486.701307][T26227] loop0: detected capacity change from 0 to 256 [ 487.662669][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8755'. [ 487.949818][T26261] can0: slcan on ttyS3. [ 487.982609][T26293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8771'. [ 488.004436][T26261] can0 (unregistered): slcan off ttyS3. [ 488.019387][T26296] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.087848][T26301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8773'. [ 488.199357][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8776'. [ 488.208318][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8776'. [ 488.293681][T26329] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.306260][T26333] IPv6: Can't replace route, no match found [ 488.362923][T26342] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.510736][T26348] lo speed is unknown, defaulting to 1000 [ 488.516795][T26348] lo speed is unknown, defaulting to 1000 [ 488.572197][T26361] netlink: 'syz.0.8794': attribute type 6 has an invalid length. [ 488.600325][T26348] lo speed is unknown, defaulting to 1000 [ 488.624032][T26352] lo speed is unknown, defaulting to 1000 [ 488.640296][T26352] lo speed is unknown, defaulting to 1000 [ 488.709870][T26352] lo speed is unknown, defaulting to 1000 [ 488.903760][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 488.903775][ T29] audit: type=1326 audit(2556.199:67894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 488.940033][T26386] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.951149][ T29] audit: type=1326 audit(2556.230:67895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 488.974911][ T29] audit: type=1326 audit(2556.230:67896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 488.998566][ T29] audit: type=1326 audit(2556.230:67897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.021624][ T29] audit: type=1326 audit(2556.230:67898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.045212][ T29] audit: type=1326 audit(2556.230:67899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.068518][ T29] audit: type=1326 audit(2556.230:67900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.092164][ T29] audit: type=1326 audit(2556.230:67901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.104486][T26379] syzkaller0: entered promiscuous mode [ 489.115575][ T29] audit: type=1326 audit(2556.230:67902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.115620][ T29] audit: type=1326 audit(2556.230:67903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.3.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 489.171552][T26379] syzkaller0: entered allmulticast mode [ 489.320470][T26403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8815'. [ 489.329688][T26403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8815'. [ 489.571916][T26424] program syz.0.8822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.599042][T26424] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 489.631695][T26432] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.683892][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8827'. [ 489.693182][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8828'. [ 489.702248][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8828'. [ 489.710039][T26443] loop0: detected capacity change from 0 to 128 [ 489.718096][T26443] msdos: Unknown parameter 'n^þŸV²Wš¼tO*I¦odots' [ 489.749181][T26445] Falling back ldisc for ptm0. [ 489.797622][T26447] wg2: entered promiscuous mode [ 489.803382][T26447] wg2: entered allmulticast mode [ 489.961534][T26458] loop0: detected capacity change from 0 to 512 [ 490.042851][T26458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.084010][T26458] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.8836: corrupted inode contents [ 490.110076][T26468] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8838'. [ 490.114994][T26458] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.8836: mark_inode_dirty error [ 490.131691][T26458] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.8836: corrupted inode contents [ 490.143981][T26458] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8836: mark_inode_dirty error [ 490.181108][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.311460][T26478] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 490.978893][T26535] tipc: Enabled bearer , priority 0 [ 491.139383][T26562] pim6reg1: entered promiscuous mode [ 491.144805][T26562] pim6reg1: entered allmulticast mode [ 492.178246][T26641] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 492.263642][T26646] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 492.271468][T26646] SELinux: failed to load policy [ 492.521331][T26675] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 492.529300][T26675] SELinux: failed to load policy [ 492.601953][T26681] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 492.864891][T26689] lo speed is unknown, defaulting to 1000 [ 492.889166][T26689] lo speed is unknown, defaulting to 1000 [ 493.003863][T26712] __nla_validate_parse: 3 callbacks suppressed [ 493.003882][T26712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8938'. [ 493.038035][T26699] lo speed is unknown, defaulting to 1000 [ 493.040134][T26689] lo speed is unknown, defaulting to 1000 [ 493.053579][T26699] lo speed is unknown, defaulting to 1000 [ 493.119724][T26716] syz!: rxe_newlink: already configured on team_slave_0 [ 493.186279][T26699] lo speed is unknown, defaulting to 1000 [ 493.631614][T26726] lo speed is unknown, defaulting to 1000 [ 493.641316][T26726] lo speed is unknown, defaulting to 1000 [ 493.694518][T26741] netlink: 'syz.4.8945': attribute type 6 has an invalid length. [ 493.746915][T26745] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8951'. [ 493.760584][T26726] lo speed is unknown, defaulting to 1000 [ 493.784181][T26737] lo speed is unknown, defaulting to 1000 [ 493.804580][T26737] lo speed is unknown, defaulting to 1000 [ 493.885889][T26737] lo speed is unknown, defaulting to 1000 [ 493.953405][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 493.953488][ T29] audit: type=1400 audit(2561.492:68264): avc: denied { connect } for pid=26752 comm="syz.6.8954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 493.980621][ T29] audit: type=1400 audit(2561.503:68265): avc: denied { write } for pid=26752 comm="syz.6.8954" path="socket:[82607]" dev="sockfs" ino=82607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 494.029067][ T29] audit: type=1326 audit(2561.576:68266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec98795ba7 code=0x7ffc0000 [ 494.052555][ T29] audit: type=1326 audit(2561.576:68267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec9873adb9 code=0x7ffc0000 [ 494.075696][ T29] audit: type=1326 audit(2561.587:68268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec98795ba7 code=0x7ffc0000 [ 494.098683][ T29] audit: type=1326 audit(2561.587:68269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec9873adb9 code=0x7ffc0000 [ 494.122028][ T29] audit: type=1326 audit(2561.587:68270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec98795ba7 code=0x7ffc0000 [ 494.145136][ T29] audit: type=1326 audit(2561.587:68271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec9873adb9 code=0x7ffc0000 [ 494.168433][ T29] audit: type=1326 audit(2561.587:68272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec98795ba7 code=0x7ffc0000 [ 494.191507][ T29] audit: type=1326 audit(2561.587:68273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26754 comm="syz.6.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec9873adb9 code=0x7ffc0000 [ 494.275304][T26762] loop0: detected capacity change from 0 to 1024 [ 494.283266][T26762] EXT4-fs: Ignoring removed nobh option [ 494.288926][T26762] EXT4-fs: Ignoring removed bh option [ 494.304533][T26762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.339838][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.511475][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8969'. [ 494.681740][T26801] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 494.820408][T26793] lo speed is unknown, defaulting to 1000 [ 494.842780][T26793] lo speed is unknown, defaulting to 1000 [ 494.879990][T26812] netlink: 'syz.2.8970': attribute type 6 has an invalid length. [ 494.935508][T26793] lo speed is unknown, defaulting to 1000 [ 494.944621][T26804] lo speed is unknown, defaulting to 1000 [ 494.963318][T26804] lo speed is unknown, defaulting to 1000 [ 495.047673][T26804] lo speed is unknown, defaulting to 1000 [ 495.474490][T26841] lo speed is unknown, defaulting to 1000 [ 495.481167][T26841] lo speed is unknown, defaulting to 1000 [ 495.539335][T26841] lo speed is unknown, defaulting to 1000 [ 495.812685][T26888] lo speed is unknown, defaulting to 1000 [ 495.818925][T26888] lo speed is unknown, defaulting to 1000 [ 495.856094][T26888] lo speed is unknown, defaulting to 1000 [ 496.002389][T26903] lo speed is unknown, defaulting to 1000 [ 496.008835][T26903] lo speed is unknown, defaulting to 1000 [ 496.012636][T26909] loop0: detected capacity change from 0 to 512 [ 496.037338][T26909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.057044][T26903] lo speed is unknown, defaulting to 1000 [ 496.129751][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.515366][T26939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9025'. [ 496.524812][T26939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9025'. [ 496.566057][T26948] loop0: detected capacity change from 0 to 1024 [ 496.574299][T26948] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 496.701988][T26962] pim6reg1: entered promiscuous mode [ 496.707583][T26962] pim6reg1: entered allmulticast mode [ 496.758239][T26950] can0: slcan on ttyS3. [ 496.814311][ T3407] hid_parser_main: 18 callbacks suppressed [ 496.814343][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.827699][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.835597][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.843062][T26950] can0 (unregistered): slcan off ttyS3. [ 496.859602][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.867100][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.874557][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.882108][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.890071][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.897488][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.904879][ T3407] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 496.920184][ T3407] hid-generic 0000:0000:0000.001C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 496.991970][T26981] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 497.617531][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9066'. [ 498.122751][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9074'. [ 498.141804][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9074'. [ 498.275958][T27065] loop0: detected capacity change from 0 to 512 [ 498.287700][T27065] EXT4-fs: Ignoring removed nobh option [ 498.304013][T27065] EXT4-fs (loop0): failed to initialize system zone (-117) [ 498.322086][T27065] EXT4-fs (loop0): mount failed [ 498.395995][T27065] SELinux: failed to load policy [ 498.463771][T27074] SELinux: ebitmap: truncated map [ 498.473462][T27074] SELinux: failed to load policy [ 498.558630][T27083] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 498.643589][T27087] loop0: detected capacity change from 0 to 2048 [ 498.723149][T27093] loop0: detected capacity change from 0 to 512 [ 498.737685][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 498.737729][ T29] audit: type=1326 audit(2566.523:68740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.746370][T27093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 498.777739][ T29] audit: type=1326 audit(2566.555:68741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.800854][ T29] audit: type=1326 audit(2566.555:68742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.824532][ T29] audit: type=1326 audit(2566.555:68743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.848178][ T29] audit: type=1326 audit(2566.555:68744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.871958][ T29] audit: type=1326 audit(2566.555:68745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.895449][ T29] audit: type=1326 audit(2566.555:68746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.919082][ T29] audit: type=1326 audit(2566.555:68747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.942248][ T29] audit: type=1326 audit(2566.555:68748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.965748][ T29] audit: type=1326 audit(2566.555:68749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.6.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 498.976018][T27093] EXT4-fs (loop0): 1 truncate cleaned up [ 499.000845][T27093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.050207][T27106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27106 comm=syz.4.9089 [ 499.120500][T27109] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 499.177312][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.267938][T27118] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 499.479749][T27143] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 499.791291][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 499.988424][T27177] netlink: 'syz.2.9120': attribute type 10 has an invalid length. [ 499.997177][T27177] netlink: 'syz.2.9120': attribute type 10 has an invalid length. [ 500.027284][T27179] tipc: Bearer : already 2 bearers with priority 10 [ 500.034938][T27179] tipc: Bearer : trying with adjusted priority [ 500.041996][T27179] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 500.144270][T27186] 9pnet_fd: p9_fd_create_tcp (27186): problem connecting socket to 127.0.0.1 [ 500.574880][T27213] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 500.597990][T27198] can0: slcan on ttyS3. [ 500.657654][T27198] can0 (unregistered): slcan off ttyS3. [ 500.780536][T27220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.787860][T27220] IPv6: NLM_F_CREATE should be set when creating new route [ 500.815882][T27222] netlink: 'syz.6.9139': attribute type 10 has an invalid length. [ 500.836927][T27222] netlink: 'syz.6.9139': attribute type 10 has an invalid length. [ 500.846803][T27222] dummy0: entered promiscuous mode [ 500.852747][T27222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 500.917048][T27230] tipc: Enabling of bearer rejected, already enabled [ 501.052365][T27232] loop0: detected capacity change from 0 to 8192 [ 501.273407][T27243] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9146'. [ 501.283248][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9146'. [ 501.297036][T27232] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 501.304638][T27232] FAT-fs (loop0): Filesystem has been set read-only [ 501.320540][T27245] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 501.403737][T27252] loop0: detected capacity change from 0 to 512 [ 501.410942][T27252] EXT4-fs: Ignoring removed nobh option [ 501.417935][T27252] EXT4-fs (loop0): failed to initialize system zone (-117) [ 501.425482][T27252] EXT4-fs (loop0): mount failed [ 501.530693][T27258] ------------[ cut here ]------------ [ 501.536747][T27258] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 501.561010][T27258] WARNING: CPU: 0 PID: 27258 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 501.571943][T27258] Modules linked in: [ 501.576008][T27258] CPU: 0 UID: 0 PID: 27258 Comm: syz.6.9153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 501.586159][T27258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.596423][T27258] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 501.603204][T27258] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 501.623161][T27258] RSP: 0018:ffffc9000885b440 EFLAGS: 00010292 [ 501.629619][T27258] RAX: 203d225d2835ba00 RBX: ffff888109fd71a8 RCX: 0000000000080000 [ 501.637637][T27258] RDX: ffffc900133a6000 RSI: 0000000000011028 RDI: 0000000000011029 [ 501.645720][T27258] RBP: fffffffe00000030 R08: 0001c9000885b27f R09: 0000000000000000 [ 501.653694][T27258] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888109fd7168 [ 501.662093][T27258] R13: ffff88813b798000 R14: ffff88813b798000 R15: ffff888109fd71a0 [ 501.670204][T27258] FS: 00007fec972076c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 501.679357][T27258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.685942][T27258] CR2: 0000200000004000 CR3: 000000014ed2e000 CR4: 00000000003506f0 [ 501.694304][T27258] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.702453][T27258] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 501.710471][T27258] Call Trace: [ 501.713804][T27258] [ 501.717197][T27258] reg_set_min_max+0x215/0x260 [ 501.721984][T27258] check_cond_jmp_op+0x1080/0x16e0 [ 501.727269][T27258] do_check+0x332a/0x7a10 [ 501.731705][T27258] do_check_common+0xc3a/0x12a0 [ 501.736664][T27258] bpf_check+0x942b/0xd9e0 [ 501.741073][T27258] ? __rcu_read_unlock+0x4f/0x70 [ 501.746428][T27258] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 501.752463][T27258] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 501.758164][T27258] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 501.764068][T27258] ? _find_next_zero_bit+0x64/0xa0 [ 501.769189][T27258] ? pcpu_block_update+0x232/0x3b0 [ 501.774882][T27258] ? pcpu_block_refresh_hint+0x157/0x170 [ 501.780644][T27258] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 501.786813][T27258] ? css_rstat_updated+0xb7/0x240 [ 501.791908][T27258] ? __rcu_read_unlock+0x4f/0x70 [ 501.796858][T27258] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 501.803061][T27258] ? selinux_bpf_prog_load+0x36/0xf0 [ 501.808340][T27258] ? __kmalloc_cache_noprof+0x299/0x320 [ 501.813921][T27258] ? selinux_bpf_prog_load+0xbf/0xf0 [ 501.819353][T27258] ? security_bpf_prog_load+0x2c/0xa0 [ 501.824778][T27258] bpf_prog_load+0xedd/0x1070 [ 501.829852][T27258] ? security_bpf+0x2b/0x90 [ 501.834356][T27258] __sys_bpf+0x462/0x7b0 [ 501.838611][T27258] __x64_sys_bpf+0x41/0x50 [ 501.843089][T27258] x64_sys_call+0x2aea/0x2ff0 [ 501.847837][T27258] do_syscall_64+0xd2/0x200 [ 501.852392][T27258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.858935][T27258] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 501.864795][T27258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.870692][T27258] RIP: 0033:0x7fec9879ebe9 [ 501.875192][T27258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.895195][T27258] RSP: 002b:00007fec97207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.903679][T27258] RAX: ffffffffffffffda RBX: 00007fec989d5fa0 RCX: 00007fec9879ebe9 [ 501.911661][T27258] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 501.919934][T27258] RBP: 00007fec98821e19 R08: 0000000000000000 R09: 0000000000000000 [ 501.928026][T27258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.936107][T27258] R13: 00007fec989d6038 R14: 00007fec989d5fa0 R15: 00007ffebe2bee28 [ 501.944458][T27258] [ 501.947491][T27258] ---[ end trace 0000000000000000 ]--- [ 502.114127][T27276] syz!: rxe_newlink: already configured on team_slave_0 [ 502.148420][T27278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9159'. [ 502.167835][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9159'. [ 502.300642][T27286] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 502.319582][T27284] SELinux: failed to load policy [ 502.394200][T27293] loop0: detected capacity change from 0 to 512 [ 502.401556][T27293] EXT4-fs: Ignoring removed nobh option [ 502.408711][T27293] EXT4-fs (loop0): failed to initialize system zone (-117) [ 502.416494][T27293] EXT4-fs (loop0): mount failed [ 502.496439][T27293] SELinux: failed to load policy [ 502.860908][T27300] can0: slcan on ttyS3. [ 502.914325][T27300] can0 (unregistered): slcan off ttyS3. [ 503.185245][T27321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9173'. [ 503.195293][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9173'. [ 503.203217][ T3375] Process accounting resumed [ 503.274737][T27327] netlink: 'syz.4.9181': attribute type 10 has an invalid length. [ 503.283249][T27327] netlink: 'syz.4.9181': attribute type 10 has an invalid length. [ 503.298220][T27329] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 503.319105][ T3375] Process accounting resumed [ 503.343317][T27337] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 503.353364][T27337] syzkaller0: entered promiscuous mode [ 503.358883][T27337] syzkaller0: entered allmulticast mode [ 503.428821][T27346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9190'. [ 503.457360][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9190'. [ 503.515526][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 503.515546][ T29] audit: type=1326 audit(2571.544:69372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.551867][T27352] can0: slcan on ttyS3. [ 503.591865][ T29] audit: type=1326 audit(2571.575:69373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.615742][ T29] audit: type=1326 audit(2571.575:69374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.617178][T27355] loop0: detected capacity change from 0 to 1024 [ 503.639295][ T29] audit: type=1326 audit(2571.575:69375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.668878][ T29] audit: type=1326 audit(2571.575:69376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.692071][ T29] audit: type=1326 audit(2571.575:69377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.692399][T27355] EXT4-fs: Ignoring removed bh option [ 503.715874][ T29] audit: type=1326 audit(2571.575:69378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.730241][T27355] EXT4-fs: inline encryption not supported [ 503.744263][ T29] audit: type=1326 audit(2571.575:69379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.773474][ T29] audit: type=1326 audit(2571.575:69380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.777978][T27355] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.796813][ T29] audit: type=1326 audit(2571.575:69381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27351 comm="syz.2.9194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 503.798993][T27351] can0 (unregistered): slcan off ttyS3. [ 503.842637][T27355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 503.855915][T27355] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.9195: lblock 2 mapped to illegal pblock 2 (length 1) [ 503.880020][T27355] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.9195: lblock 0 mapped to illegal pblock 48 (length 1) [ 503.896398][T27355] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.9195: Failed to acquire dquot type 0 [ 503.908551][T27355] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 503.918159][T27355] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.9195: mark_inode_dirty error [ 503.929960][T27355] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 503.940913][T27355] EXT4-fs (loop0): 1 orphan inode deleted [ 503.951356][T27355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.964678][T11985] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.979159][T11985] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:32: Failed to release dquot type 0 [ 504.001684][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.011314][ T3305] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 504.024864][ T3305] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 504.034592][ T3305] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 504.117372][T27368] syzkaller0: entered promiscuous mode [ 504.122861][T27368] syzkaller0: entered allmulticast mode [ 504.157953][T27375] syz!: rxe_newlink: already configured on team_slave_0 [ 504.305051][T27385] tipc: Enabled bearer , priority 0 [ 504.305991][T27385] syzkaller0: entered promiscuous mode [ 504.318237][T27385] syzkaller0: entered allmulticast mode [ 504.331811][T27385] tipc: Resetting bearer [ 504.351420][T27384] tipc: Resetting bearer [ 504.360318][T27384] tipc: Disabling bearer [ 504.399031][T27395] 9pnet_fd: Insufficient options for proto=fd [ 504.457570][T27400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9210'. [ 504.489034][T27404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9215'. [ 504.522922][T27406] syz!: rxe_newlink: already configured on team_slave_0 [ 504.823015][T27402] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9213'. [ 504.832132][T27402] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9213'. [ 504.856128][T27402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9213'. [ 504.866736][T27426] tipc: Enabling of bearer rejected, already enabled [ 504.943576][T27435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9226'. [ 505.094669][T27446] syz!: rxe_newlink: already configured on team_slave_0 [ 505.264461][T27460] loop0: detected capacity change from 0 to 2048 [ 505.312560][T27460] loop0: p2 p3 p7 [ 505.593125][T27486] can0: slcan on ttyS3. [ 505.616518][T27488] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 505.666240][T27485] can0 (unregistered): slcan off ttyS3. [ 505.747681][T27497] serio: Serial port ptm0 [ 506.122104][T27517] smc: net device bond0 applied user defined pnetid SYZ0 [ 506.166126][T27517] smc: net device bond0 erased user defined pnetid SYZ0 [ 506.358048][T27525] loop0: detected capacity change from 0 to 512 [ 506.364900][T27525] EXT4-fs: Ignoring removed nobh option [ 506.388597][T27525] EXT4-fs (loop0): failed to initialize system zone (-117) [ 506.406470][T27525] EXT4-fs (loop0): mount failed [ 506.474879][T27525] SELinux: failed to load policy [ 506.528808][T27544] loop0: detected capacity change from 0 to 128 [ 506.538272][T27544] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 506.546675][T27544] FAT-fs (loop0): Filesystem has been set read-only [ 506.553622][T27544] bio_check_eod: 113 callbacks suppressed [ 506.553648][T27544] syz.0.9271: attempt to access beyond end of device [ 506.553648][T27544] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 506.585639][T27544] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 506.593728][T27544] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 506.602386][T27546] syz.0.9271: attempt to access beyond end of device [ 506.602386][T27546] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 506.616222][T27546] Buffer I/O error on dev loop0, logical block 2065, async page read [ 506.642216][T27546] syz.0.9271: attempt to access beyond end of device [ 506.642216][T27546] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 506.655572][T27546] Buffer I/O error on dev loop0, logical block 2066, async page read [ 506.671948][T27546] syz.0.9271: attempt to access beyond end of device [ 506.671948][T27546] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 506.685356][T27546] Buffer I/O error on dev loop0, logical block 2067, async page read [ 506.693801][T27546] syz.0.9271: attempt to access beyond end of device [ 506.693801][T27546] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 506.707602][T27546] Buffer I/O error on dev loop0, logical block 2068, async page read [ 506.722547][T27546] syz.0.9271: attempt to access beyond end of device [ 506.722547][T27546] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 506.736486][T27546] Buffer I/O error on dev loop0, logical block 2069, async page read [ 506.744946][T27546] syz.0.9271: attempt to access beyond end of device [ 506.744946][T27546] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 506.758209][T27546] Buffer I/O error on dev loop0, logical block 2070, async page read [ 506.767022][T27546] syz.0.9271: attempt to access beyond end of device [ 506.767022][T27546] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 506.780274][T27546] Buffer I/O error on dev loop0, logical block 2071, async page read [ 506.788428][T27546] syz.0.9271: attempt to access beyond end of device [ 506.788428][T27546] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 506.802329][T27546] Buffer I/O error on dev loop0, logical block 2072, async page read [ 506.815966][T27544] syz.0.9271: attempt to access beyond end of device [ 506.815966][T27544] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 506.829346][T27544] Buffer I/O error on dev loop0, logical block 2065, async page read [ 506.866826][T27544] Buffer I/O error on dev loop0, logical block 2066, async page read [ 506.929251][T27564] syz!: rxe_newlink: already configured on team_slave_0 [ 507.193105][T27596] lo speed is unknown, defaulting to 1000 [ 507.204894][T27596] lo speed is unknown, defaulting to 1000 [ 507.242748][T27596] lo speed is unknown, defaulting to 1000 [ 507.248992][T27609] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 507.380936][T27614] syz!: rxe_newlink: already configured on team_slave_0 [ 507.436125][T27619] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 508.106411][T27653] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 508.298449][ T29] kauditd_printk_skb: 811 callbacks suppressed [ 508.298467][ T29] audit: type=1326 audit(2576.564:70190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.299444][T27659] __nla_validate_parse: 6 callbacks suppressed [ 508.299459][T27659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9314'. [ 508.305349][ T29] audit: type=1326 audit(2576.575:70191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.373517][T27658] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 508.381415][ T29] audit: type=1326 audit(2576.638:70192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.405261][ T29] audit: type=1326 audit(2576.638:70193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.429134][ T29] audit: type=1326 audit(2576.648:70194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.452341][ T29] audit: type=1326 audit(2576.648:70195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.476492][ T29] audit: type=1326 audit(2576.648:70196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.499748][ T29] audit: type=1326 audit(2576.648:70197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.523480][ T29] audit: type=1326 audit(2576.648:70198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.546553][ T29] audit: type=1326 audit(2576.648:70199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27657 comm="syz.6.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 508.755018][T27671] netlink: 7 bytes leftover after parsing attributes in process `+}[@S'. [ 508.808440][T27684] loop0: detected capacity change from 0 to 164 [ 508.839267][T27684] $Hÿ: entered promiscuous mode [ 508.862326][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9328'. [ 508.933199][T27702] 9pnet_virtio: no channels available for device syz [ 509.042512][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9333'. [ 509.222294][T27726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9339'. [ 509.231335][T27726] netem: unknown loss type 12 [ 509.582512][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 509.706691][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9347'. [ 509.746355][T27748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9347'. [ 509.845395][T27753] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 510.047758][T27762] syz!: rxe_newlink: already configured on team_slave_0 [ 510.300450][T27790] tipc: Enabled bearer , priority 0 [ 510.332622][T27784] tipc: Resetting bearer [ 510.373378][T27784] tipc: Disabling bearer [ 510.528407][T27804] lo speed is unknown, defaulting to 1000 [ 510.552761][T27804] lo speed is unknown, defaulting to 1000 [ 510.621950][T27804] lo speed is unknown, defaulting to 1000 [ 510.657636][T27816] 9pnet_virtio: no channels available for device syz [ 510.703513][T27812] lo speed is unknown, defaulting to 1000 [ 510.723690][T27812] lo speed is unknown, defaulting to 1000 [ 510.821709][T27812] lo speed is unknown, defaulting to 1000 [ 510.828829][T27822] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 510.973729][T27833] wg2: left promiscuous mode [ 510.975199][T27832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9386'. [ 510.978544][T27833] wg2: left allmulticast mode [ 511.188768][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9386'. [ 511.210693][T27833] wg2: entered promiscuous mode [ 511.215585][T27833] wg2: entered allmulticast mode [ 511.348776][T27829] can0: slcan on ttyS3. [ 511.388328][T27829] can0 (unregistered): slcan off ttyS3. [ 511.528369][T27858] usb usb1: usbfs: process 27858 (syz.0.9382) did not claim interface 4 before use [ 511.681271][T27864] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 512.341984][T27886] 9pnet_virtio: no channels available for device syz [ 512.349181][T27881] syzkaller0: entered promiscuous mode [ 512.354802][T27881] syzkaller0: entered allmulticast mode [ 512.390222][T27888] syz!: rxe_newlink: already configured on team_slave_0 [ 512.516962][T27890] ªªªªªª: renamed from vlan0 [ 512.811012][T27901] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 512.851297][T27896] syzkaller0: entered promiscuous mode [ 512.856857][T27896] syzkaller0: entered allmulticast mode [ 513.327809][T27908] netlink: 'syz.4.9404': attribute type 10 has an invalid length. [ 513.449155][T27910] lo speed is unknown, defaulting to 1000 [ 513.456049][T27910] lo speed is unknown, defaulting to 1000 [ 513.480659][T27917] __nla_validate_parse: 6 callbacks suppressed [ 513.480678][T27917] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9407'. [ 513.595687][T27910] lo speed is unknown, defaulting to 1000 [ 513.610328][T27913] lo speed is unknown, defaulting to 1000 [ 513.649652][T27913] lo speed is unknown, defaulting to 1000 [ 513.773363][T27913] lo speed is unknown, defaulting to 1000 [ 513.976629][T27925] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 513.979755][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 513.979771][ T29] audit: type=1326 audit(2582.519:70580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.012515][ T29] audit: type=1326 audit(2582.519:70581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.035682][ T29] audit: type=1326 audit(2582.519:70582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.058759][ T29] audit: type=1326 audit(2582.519:70583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.081826][ T29] audit: type=1326 audit(2582.519:70584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.104951][ T29] audit: type=1326 audit(2582.519:70585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.128294][ T29] audit: type=1326 audit(2582.519:70586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.151410][ T29] audit: type=1326 audit(2582.519:70587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.174476][ T29] audit: type=1326 audit(2582.519:70588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 514.197647][ T29] audit: type=1326 audit(2582.519:70589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.4.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874c63ebe9 code=0x7ffc0000 [ 516.061406][T27964] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 516.192264][T27966] lo speed is unknown, defaulting to 1000 [ 516.226490][T27966] lo speed is unknown, defaulting to 1000 [ 516.299707][T27970] ip6gre1: left allmulticast mode [ 516.426531][T27966] lo speed is unknown, defaulting to 1000 [ 516.898319][T27976] loop0: detected capacity change from 0 to 128 [ 516.940452][T27979] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 517.140764][T27994] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 517.351861][T27999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9437'. [ 517.440063][T27999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27999 comm=syz.4.9437 [ 517.976779][T28019] syz!: rxe_newlink: already configured on team_slave_0 [ 518.014210][T28023] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 518.282981][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9454'. [ 518.516761][T28055] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 518.571076][T28059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 518.754413][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 518.754430][ T29] audit: type=1326 audit(2587.540:71014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28036 comm="syz.0.9451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0118dbebe9 code=0x7ffc0000 [ 518.787934][T28067] tipc: Enabling of bearer rejected, already enabled [ 518.833543][ T29] audit: type=1326 audit(2587.582:71015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28036 comm="syz.0.9451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0118dbebe9 code=0x7ffc0000 [ 518.856951][ T29] audit: type=1326 audit(2587.603:71016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28036 comm="syz.0.9451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0118dbebe9 code=0x7ffc0000 [ 518.880214][ T29] audit: type=1326 audit(2587.613:71017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28036 comm="syz.0.9451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0118dbebe9 code=0x7ffc0000 [ 518.903368][ T29] audit: type=1326 audit(2587.624:71018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28036 comm="syz.0.9451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0118dbebe9 code=0x7ffc0000 [ 519.018088][T28080] netlink: 'syz.3.9472': attribute type 13 has an invalid length. [ 519.044931][T28080] 0ªî{X¹¦: refused to change device tx_queue_len [ 519.061901][T28080] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 519.064271][ T29] audit: type=1400 audit(2587.624:71019): avc: denied { getopt } for pid=28070 comm="syz.3.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.097427][ T29] audit: type=1326 audit(2587.655:71020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.3.9470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 519.121099][ T29] audit: type=1326 audit(2587.655:71021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.3.9470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 519.144268][ T29] audit: type=1326 audit(2587.655:71022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.3.9470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 519.167949][ T29] audit: type=1326 audit(2587.655:71023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.3.9470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 519.203938][T28084] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 519.259219][T28092] veth0_to_team: entered promiscuous mode [ 519.371641][T28100] dummy0: left promiscuous mode [ 519.392726][T28100] wg2: left promiscuous mode [ 519.397787][T28100] wg2: left allmulticast mode [ 519.415695][T28100] geneve2: left allmulticast mode [ 519.421169][T28100] team1: left promiscuous mode [ 519.426170][T28100] team1: left allmulticast mode [ 519.445668][T28100] vlan0: left promiscuous mode [ 519.450487][T28100] bond2: left promiscuous mode [ 519.556590][T28118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9489'. [ 519.650881][T28123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9490'. [ 519.753712][T28142] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9493'. [ 520.002893][T28146] can0: slcan on ttyS3. [ 520.062079][T28146] can0 (unregistered): slcan off ttyS3. [ 520.124645][T28153] veth13: left promiscuous mode [ 520.218331][T28163] tipc: Enabling of bearer rejected, already enabled [ 520.324876][T28168] syz.3.9504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 520.339651][T28168] CPU: 0 UID: 0 PID: 28168 Comm: syz.3.9504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 520.339691][T28168] Tainted: [W]=WARN [ 520.339699][T28168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.339714][T28168] Call Trace: [ 520.339723][T28168] [ 520.339732][T28168] __dump_stack+0x1d/0x30 [ 520.339829][T28168] dump_stack_lvl+0xe8/0x140 [ 520.339928][T28168] dump_stack+0x15/0x1b [ 520.340014][T28168] warn_alloc+0x12b/0x1a0 [ 520.340054][T28168] __vmalloc_node_range_noprof+0x9c/0xe00 [ 520.340137][T28168] ? __futex_wait+0x1ff/0x260 [ 520.340182][T28168] ? __pfx_futex_wake_mark+0x10/0x10 [ 520.340211][T28168] ? __rcu_read_unlock+0x4f/0x70 [ 520.340236][T28168] ? avc_has_perm_noaudit+0x1b1/0x200 [ 520.340349][T28168] vmalloc_user_noprof+0x7d/0xb0 [ 520.340377][T28168] ? xskq_create+0x80/0xe0 [ 520.340396][T28168] xskq_create+0x80/0xe0 [ 520.340444][T28168] xsk_init_queue+0x95/0xf0 [ 520.340462][T28168] xsk_setsockopt+0x477/0x640 [ 520.340491][T28168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 520.340600][T28168] __sys_setsockopt+0x181/0x200 [ 520.340659][T28168] __x64_sys_setsockopt+0x64/0x80 [ 520.340686][T28168] x64_sys_call+0x20ec/0x2ff0 [ 520.340743][T28168] do_syscall_64+0xd2/0x200 [ 520.340777][T28168] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 520.340804][T28168] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.340836][T28168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.340910][T28168] RIP: 0033:0x7fed3470ebe9 [ 520.340929][T28168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.340947][T28168] RSP: 002b:00007fed3316f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 520.340966][T28168] RAX: ffffffffffffffda RBX: 00007fed34945fa0 RCX: 00007fed3470ebe9 [ 520.341027][T28168] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 520.341053][T28168] RBP: 00007fed34791e19 R08: 0000000000000004 R09: 0000000000000000 [ 520.341068][T28168] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 520.341082][T28168] R13: 00007fed34946038 R14: 00007fed34945fa0 R15: 00007ffc6c0a4368 [ 520.341104][T28168] [ 520.341173][T28168] Mem-Info: [ 520.564652][T28168] active_anon:12594 inactive_anon:24 isolated_anon:0 [ 520.564652][T28168] active_file:21121 inactive_file:5343 isolated_file:0 [ 520.564652][T28168] unevictable:16328 dirty:202 writeback:0 [ 520.564652][T28168] slab_reclaimable:5592 slab_unreclaimable:91534 [ 520.564652][T28168] mapped:29067 shmem:2512 pagetables:2283 [ 520.564652][T28168] sec_pagetables:0 bounce:0 [ 520.564652][T28168] kernel_misc_reclaimable:0 [ 520.564652][T28168] free:1717583 free_pcp:16237 free_cma:0 [ 520.610884][T28168] Node 0 active_anon:49680kB inactive_anon:96kB active_file:84484kB inactive_file:21372kB unevictable:65312kB isolated(anon):0kB isolated(file):0kB mapped:116268kB dirty:808kB writeback:0kB shmem:10048kB kernel_stack:5024kB pagetables:9132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 520.638906][T28168] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.668811][T28168] lowmem_reserve[]: 0 2883 7862 7862 [ 520.674293][T28168] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 520.699109][T28174] syzkaller0: entered promiscuous mode [ 520.705339][T28168] lowmem_reserve[]: 0 0 4978 4978 [ 520.710363][T28174] syzkaller0: entered allmulticast mode [ 520.715354][T28168] Node 0 Normal free:3904516kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46200kB inactive_anon:96kB active_file:84484kB inactive_file:21372kB unevictable:65312kB writepending:808kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63100kB local_pcp:7012kB free_cma:0kB [ 520.753579][T28168] lowmem_reserve[]: 0 0 0 0 [ 520.758287][T28168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 520.771054][T28168] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 520.787552][T28168] Node 0 Normal: 3918*4kB (UM) 1689*8kB (UME) 953*16kB (UME) 891*32kB (UM) 281*64kB (UME) 116*128kB (UME) 64*256kB (UME) 233*512kB (UME) 251*1024kB (UM) 66*2048kB (UM) 799*4096kB (UM) = 3906352kB [ 520.806970][T28168] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 520.816764][T28168] 45330 total pagecache pages [ 520.821425][T28168] 49 pages in swap cache [ 520.825793][T28168] Free swap = 103840kB [ 520.829963][T28168] Total swap = 124996kB [ 520.834191][T28168] 2097051 pages RAM [ 520.838002][T28168] 0 pages HighMem/MovableOnly [ 520.843074][T28168] 80446 pages reserved [ 520.977200][T28196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=28196 comm=syz.4.9515 [ 520.995519][T28193] syz!: rxe_newlink: already configured on team_slave_0 [ 521.012679][T28196] blktrace: Concurrent blktraces are not allowed on loop9 [ 521.267738][T28220] hub 6-0:1.0: USB hub found [ 521.302697][T28220] hub 6-0:1.0: 8 ports detected [ 521.384448][T28237] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 521.448972][T28241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9534'. [ 521.547804][T28245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28245 comm=syz.6.9534 [ 521.643069][T28231] lo speed is unknown, defaulting to 1000 [ 521.692469][T28231] lo speed is unknown, defaulting to 1000 [ 521.919651][T28231] lo speed is unknown, defaulting to 1000 [ 522.299424][T28261] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004 [ 522.504868][T28272] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 522.514310][T28272] syzkaller0: entered promiscuous mode [ 522.519895][T28272] syzkaller0: entered allmulticast mode [ 522.571110][T28274] tipc: Enabling of bearer rejected, already enabled [ 522.747850][T28283] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 523.001799][T28301] loop0: detected capacity change from 0 to 256 [ 523.009160][T28301] vfat: Unknown parameter 'shortna€ìAin95' [ 523.336962][T28311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9559'. [ 523.398672][T28313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9559'. [ 523.689642][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9554'. [ 523.737983][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 523.737999][ T29] audit: type=1326 audit(2592.781:71716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.792329][ T29] audit: type=1326 audit(2592.781:71717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.816011][ T29] audit: type=1326 audit(2592.781:71718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.839090][ T29] audit: type=1326 audit(2592.781:71719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.862750][ T29] audit: type=1326 audit(2592.781:71720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.886294][ T29] audit: type=1326 audit(2592.781:71721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.909996][ T29] audit: type=1326 audit(2592.781:71722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.933450][ T29] audit: type=1326 audit(2592.781:71723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.957290][ T29] audit: type=1326 audit(2592.781:71724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 523.980415][ T29] audit: type=1326 audit(2592.781:71725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28318 comm="syz.3.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3470ebe9 code=0x7ffc0000 [ 525.330980][T28341] veth0_to_team: entered promiscuous mode [ 525.376656][T28346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9571'. [ 525.563759][T28350] can0: slcan on ttyS3. [ 525.612896][T28350] can0 (unregistered): slcan off ttyS3. [ 525.684457][T28371] lo speed is unknown, defaulting to 1000 [ 525.690664][T28371] lo speed is unknown, defaulting to 1000 [ 525.731149][T28371] lo speed is unknown, defaulting to 1000 [ 525.759288][T28373] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 525.773774][T28373] syzkaller0: entered promiscuous mode [ 525.779872][T28373] syzkaller0: entered allmulticast mode [ 526.052205][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9584'. [ 526.320655][T28396] loop0: detected capacity change from 0 to 512 [ 526.373003][T28396] EXT4-fs: Ignoring removed nobh option [ 526.471059][T28396] EXT4-fs (loop0): failed to initialize system zone (-117) [ 526.513794][T28396] EXT4-fs (loop0): mount failed [ 526.973013][T28396] SELinux: failed to load policy [ 526.994944][T28406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9590'. [ 527.003949][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9590'. [ 527.088845][T28408] 9pnet_virtio: no channels available for device 127.0.0.1 [ 527.104398][T28410] 9pnet_fd: Insufficient options for proto=fd [ 527.128317][T28412] tipc: Enabled bearer , priority 0 [ 527.135411][T28412] syzkaller0: entered promiscuous mode [ 527.140978][T28412] syzkaller0: entered allmulticast mode [ 527.150385][T28412] tipc: Resetting bearer [ 527.157762][T28411] tipc: Resetting bearer [ 527.164909][T28411] tipc: Disabling bearer [ 527.236333][T28420] vlan0: entered promiscuous mode [ 527.241868][T28420] hsr_slave_1: entered promiscuous mode [ 527.247506][T28420] vlan0: entered allmulticast mode [ 527.252749][T28420] hsr_slave_1: entered allmulticast mode [ 527.261034][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9596'. [ 527.818165][T28435] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 528.012660][T28437] tipc: Enabling of bearer rejected, already enabled [ 528.094342][T28441] lo speed is unknown, defaulting to 1000 [ 528.107611][T28441] lo speed is unknown, defaulting to 1000 [ 528.212886][T28455] tipc: Enabling of bearer rejected, failed to enable media [ 528.267992][T28441] lo speed is unknown, defaulting to 1000 [ 528.345241][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9601'. [ 528.607758][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 528.607776][ T29] audit: type=1400 audit(2597.896:71970): avc: denied { write } for pid=28465 comm="syz.3.9610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.663639][T28471] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 528.670208][T28471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 528.677688][T28471] vhci_hcd vhci_hcd.0: Device attached [ 528.683503][T28476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.736147][T28471] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 528.742980][T28471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 528.750398][T28471] vhci_hcd vhci_hcd.0: Device attached [ 528.777135][T28471] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 528.783682][T28471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 528.791296][T28471] vhci_hcd vhci_hcd.0: Device attached [ 528.812344][ T29] audit: type=1400 audit(2598.116:71971): avc: denied { create } for pid=28481 comm="syz.3.9614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 528.850232][T28471] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 528.856876][T28471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 528.864522][T28471] vhci_hcd vhci_hcd.0: Device attached [ 528.870100][ T3387] vhci_hcd: vhci_device speed not set [ 528.889873][T28476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.927973][T28471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.954652][ T3387] usb 1-1: new high-speed USB device number 3 using vhci_hcd [ 528.971504][T28485] vhci_hcd: connection closed [ 528.971615][T28477] vhci_hcd: connection closed [ 528.971675][T28479] vhci_hcd: connection closed [ 528.976413][T28475] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 528.992028][T12019] vhci_hcd: stop threads [ 528.996337][T12019] vhci_hcd: release socket [ 529.000828][T12019] vhci_hcd: disconnect device [ 529.005661][T28474] vhci_hcd: connection closed [ 529.007120][T12019] vhci_hcd: stop threads [ 529.016149][T12019] vhci_hcd: release socket [ 529.020573][T12019] vhci_hcd: disconnect device [ 529.045192][T12019] vhci_hcd: stop threads [ 529.049465][T12019] vhci_hcd: release socket [ 529.053947][T12019] vhci_hcd: disconnect device [ 529.078668][ T29] audit: type=1326 audit(2598.389:71972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.101013][T12019] vhci_hcd: stop threads [ 529.102273][ T29] audit: type=1326 audit(2598.389:71973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.106098][T12019] vhci_hcd: release socket [ 529.129559][ T29] audit: type=1326 audit(2598.389:71974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec9879d550 code=0x7ffc0000 [ 529.133571][T12019] vhci_hcd: disconnect device [ 529.157039][ T29] audit: type=1326 audit(2598.389:71975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.184922][ T29] audit: type=1326 audit(2598.389:71976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.208059][ T29] audit: type=1326 audit(2598.389:71977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.231851][ T29] audit: type=1326 audit(2598.389:71978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.255123][ T29] audit: type=1326 audit(2598.389:71979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.6.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9879ebe9 code=0x7ffc0000 [ 529.496254][T28482] Set syz1 is full, maxelem 65536 reached [ 529.675357][T28496] lo speed is unknown, defaulting to 1000 [ 529.682705][T28496] lo speed is unknown, defaulting to 1000 [ 530.671503][T28500] loop0: detected capacity change from 0 to 512 [ 530.696733][T28500] EXT4-fs: Ignoring removed nobh option [ 530.732444][T28496] lo speed is unknown, defaulting to 1000 [ 530.762019][T28500] EXT4-fs (loop0): failed to initialize system zone (-117) [ 530.775060][T28500] EXT4-fs (loop0): mount failed [ 530.815636][T28500] SELinux: failed to load policy [ 531.071855][T28528] syz!: rxe_newlink: already configured on team_slave_0 [ 531.604957][T28538] loop0: detected capacity change from 0 to 8192 [ 531.816052][T28557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 531.863184][T28538] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 531.870820][T28538] FAT-fs (loop0): Filesystem has been set read-only [ 531.939856][T28558] lo speed is unknown, defaulting to 1000 [ 531.954086][T28558] lo speed is unknown, defaulting to 1000 [ 532.009867][T28558] lo speed is unknown, defaulting to 1000 [ 532.198380][T28570] syz!: rxe_newlink: already configured on team_slave_0 [ 532.295490][T28581] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 532.302066][T28581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 532.310103][T28581] vhci_hcd vhci_hcd.0: Device attached [ 532.320769][T28586] loop0: detected capacity change from 0 to 512 [ 532.329449][T28581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.339436][T28581] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 532.345977][T28581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 532.353520][T28581] vhci_hcd vhci_hcd.0: Device attached [ 532.359311][T28586] EXT4-fs (loop0): too many log groups per flexible block group [ 532.365998][T28593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9648'. [ 532.367539][T28586] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 532.375965][T28593] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9648'. [ 532.391700][T28593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9648'. [ 532.392411][T28586] EXT4-fs (loop0): mount failed [ 532.401043][T28581] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 532.408024][T28593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9648'. [ 532.412357][T28581] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 532.428915][T28581] vhci_hcd vhci_hcd.0: Device attached [ 532.445858][T28586] loop0: detected capacity change from 0 to 512 [ 532.447336][T28597] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 532.458816][T28597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 532.466499][T28597] vhci_hcd vhci_hcd.0: Device attached [ 532.486821][ T3407] vhci_hcd: vhci_device speed not set [ 532.498370][T28581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.507285][T28581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.522772][T28598] vhci_hcd: connection closed [ 532.522987][T28591] vhci_hcd: connection closed [ 532.523042][T28595] vhci_hcd: connection closed [ 532.528040][T28583] vhci_hcd: connection closed [ 532.537656][T11983] vhci_hcd: stop threads [ 532.546744][T11983] vhci_hcd: release socket [ 532.551191][T11983] vhci_hcd: disconnect device [ 532.555964][ T3407] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 532.564019][T28585] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 532.570138][T11983] vhci_hcd: stop threads [ 532.574435][T11983] vhci_hcd: release socket [ 532.578861][T11983] vhci_hcd: disconnect device [ 532.583898][T11983] vhci_hcd: stop threads [ 532.588417][T11983] vhci_hcd: release socket [ 532.593303][T28603] loop0: detected capacity change from 0 to 128 [ 532.599836][T11983] vhci_hcd: disconnect device [ 532.604883][T11983] vhci_hcd: stop threads [ 532.609317][T11983] vhci_hcd: release socket [ 532.613807][T11983] vhci_hcd: disconnect device [ 533.240688][T28616] lo speed is unknown, defaulting to 1000 [ 533.247170][T28616] lo speed is unknown, defaulting to 1000 [ 533.284945][T28616] lo speed is unknown, defaulting to 1000 [ 533.556272][T28626] lo speed is unknown, defaulting to 1000 [ 533.562548][T28626] lo speed is unknown, defaulting to 1000 [ 533.598744][T28626] lo speed is unknown, defaulting to 1000 [ 533.835421][ T3387] vhci_hcd: vhci_device speed not set [ 533.944765][T28635] ref_ctr increment failed for inode: 0x2543 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005a840 [ 533.965083][T28630] SELinux: failed to load policy [ 533.991788][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 533.991807][ T29] audit: type=1400 audit(2603.546:72228): avc: denied { associate } for pid=28638 comm="syz.2.9661" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 534.028920][T28634] uprobe: syz.4.9660:28634 failed to unregister, leaking uprobe [ 534.045418][ T29] audit: type=1326 audit(2603.599:72229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.068708][ T29] audit: type=1326 audit(2603.599:72230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.091981][ T29] audit: type=1326 audit(2603.599:72231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.115213][ T29] audit: type=1326 audit(2603.599:72232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.138310][ T29] audit: type=1326 audit(2603.599:72233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.161392][ T29] audit: type=1326 audit(2603.599:72234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.184604][ T29] audit: type=1326 audit(2603.599:72235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.207721][ T29] audit: type=1326 audit(2603.599:72236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.230990][ T29] audit: type=1326 audit(2603.599:72237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28638 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 534.287484][T28654] team0: Port device hsr_slave_0 removed [ 534.313499][T28657] tipc: Enabling of bearer rejected, already enabled [ 534.328881][T28658] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 535.181833][T28672] random: crng reseeded on system resumption [ 535.213245][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9675'. [ 535.231484][T28673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.247677][T28673] macvlan0: entered promiscuous mode [ 535.253123][T28673] macvlan0: entered allmulticast mode [ 535.260328][T28673] bond4: entered promiscuous mode [ 535.265826][T28673] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 535.286289][T28673] bond4: left promiscuous mode [ 535.434411][T28689] lo speed is unknown, defaulting to 1000 [ 535.440493][T28689] lo speed is unknown, defaulting to 1000 [ 535.601163][T28690] lo speed is unknown, defaulting to 1000 [ 535.629301][T28690] lo speed is unknown, defaulting to 1000 [ 535.709459][T28690] lo speed is unknown, defaulting to 1000 [ 535.790789][T28689] lo speed is unknown, defaulting to 1000 [ 536.248845][T28699] tipc: Enabling of bearer rejected, failed to enable media [ 536.348065][T28706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9682'. [ 536.379831][T28706] netem: change failed [ 536.396663][T28701] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 536.416366][T28711] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9685'. [ 536.493412][T28717] batadv0: entered promiscuous mode [ 536.635253][T28725] tipc: Enabling of bearer rejected, failed to enable media [ 537.412046][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9694'. [ 537.499036][ T3407] usb 5-1: enqueue for inactive port 0 [ 537.505248][ T3407] usb 5-1: enqueue for inactive port 0 [ 537.521443][T28747] tipc: Enabling of bearer rejected, failed to enable media [ 537.571330][ T3407] vhci_hcd: vhci_device speed not set [ 537.890015][T28765] syz!: rxe_newlink: already configured on team_slave_0 [ 537.991152][T28770] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 538.002692][T28770] SELinux: failed to load policy [ 538.020937][T28776] netlink: 'syz.3.9707': attribute type 4 has an invalid length. [ 538.037048][T28778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9708'. [ 538.159945][T28781] lo speed is unknown, defaulting to 1000 [ 538.175539][T28781] lo speed is unknown, defaulting to 1000 [ 538.210784][T28788] netlink: 'syz.0.9710': attribute type 30 has an invalid length. [ 538.248503][T28781] lo speed is unknown, defaulting to 1000 [ 538.326691][T28792] syz!: rxe_newlink: already configured on team_slave_0 [ 538.398459][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9712'. [ 538.572117][T28808] can0: slcan on ttyS3. [ 538.627838][T28808] can0 (unregistered): slcan off ttyS3. [ 538.707548][T28808] loop0: detected capacity change from 0 to 512 [ 538.753292][T28808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.767912][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 538.767928][ T29] audit: type=1326 audit(2608.567:72446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.797256][ T29] audit: type=1326 audit(2608.567:72447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.820338][ T29] audit: type=1326 audit(2608.567:72448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.843530][ T29] audit: type=1326 audit(2608.567:72449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.866734][ T29] audit: type=1326 audit(2608.567:72450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.889997][ T29] audit: type=1326 audit(2608.567:72451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.913147][ T29] audit: type=1326 audit(2608.567:72452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.936309][ T29] audit: type=1326 audit(2608.567:72453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.959461][ T29] audit: type=1326 audit(2608.567:72454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 538.982566][ T29] audit: type=1326 audit(2608.567:72455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7e92ebe9 code=0x7ffc0000 [ 539.021475][T28808] EXT4-fs (loop0): 1 truncate cleaned up [ 539.027953][T28808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.359623][T28808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.488853][T28849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9728'. [ 539.766223][T28854] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 540.228628][T28880] bond0: entered promiscuous mode [ 540.233891][T28880] dummy0: entered promiscuous mode [ 540.253689][T28880] batadv0: entered promiscuous mode [ 540.294897][T28885] loop0: detected capacity change from 0 to 1024 [ 540.301767][T28885] EXT4-fs: Ignoring removed orlov option [ 540.314033][T28885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.371541][ T3407] IPVS: starting estimator thread 0... [ 540.379869][T28886] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 540.398937][T28891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9744'. [ 540.423293][T28893] ================================================================== [ 540.431436][T28893] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 540.440676][T28893] [ 540.443007][T28893] write to 0xffff888119c9cea8 of 4 bytes by task 28885 on cpu 1: [ 540.450746][T28893] writeback_single_inode+0x14a/0x3e0 [ 540.456151][T28893] sync_inode_metadata+0x5b/0x90 [ 540.461211][T28893] generic_buffers_fsync_noflush+0xd9/0x120 [ 540.467121][T28893] ext4_sync_file+0x1ab/0x690 [ 540.471823][T28893] vfs_fsync_range+0x10a/0x130 [ 540.476616][T28893] ext4_buffered_write_iter+0x34f/0x3c0 [ 540.482180][T28893] ext4_file_write_iter+0x383/0xf00 [ 540.487396][T28893] iter_file_splice_write+0x666/0xa60 [ 540.492772][T28893] direct_splice_actor+0x156/0x2a0 [ 540.497886][T28893] splice_direct_to_actor+0x312/0x680 [ 540.503256][T28893] do_splice_direct+0xda/0x150 [ 540.508018][T28893] do_sendfile+0x380/0x650 [ 540.512439][T28893] __x64_sys_sendfile64+0x105/0x150 [ 540.517647][T28893] x64_sys_call+0x2bb0/0x2ff0 [ 540.522326][T28893] do_syscall_64+0xd2/0x200 [ 540.526837][T28893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.532733][T28893] [ 540.535053][T28893] read to 0xffff888119c9cea8 of 4 bytes by task 28893 on cpu 0: [ 540.542680][T28893] generic_buffers_fsync_noflush+0x80/0x120 [ 540.548578][T28893] ext4_sync_file+0x1ab/0x690 [ 540.553256][T28893] vfs_fsync_range+0x10a/0x130 [ 540.558021][T28893] ext4_buffered_write_iter+0x34f/0x3c0 [ 540.563575][T28893] ext4_file_write_iter+0x383/0xf00 [ 540.568790][T28893] iter_file_splice_write+0x666/0xa60 [ 540.574274][T28893] direct_splice_actor+0x156/0x2a0 [ 540.579382][T28893] splice_direct_to_actor+0x312/0x680 [ 540.584767][T28893] do_splice_direct+0xda/0x150 [ 540.589533][T28893] do_sendfile+0x380/0x650 [ 540.593985][T28893] __x64_sys_sendfile64+0x105/0x150 [ 540.599193][T28893] x64_sys_call+0x2bb0/0x2ff0 [ 540.603959][T28893] do_syscall_64+0xd2/0x200 [ 540.608483][T28893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.614421][T28893] [ 540.616755][T28893] value changed: 0x00000038 -> 0x00000002 [ 540.622471][T28893] [ 540.624811][T28893] Reported by Kernel Concurrency Sanitizer on: [ 540.630958][T28893] CPU: 0 UID: 0 PID: 28893 Comm: syz.0.9742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 540.642328][T28893] Tainted: [W]=WARN [ 540.646128][T28893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.656181][T28893] ================================================================== [ 540.693821][T28892] IPVS: using max 2256 ests per chain, 112800 per kthread [ 540.781326][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.665104][ T3407] page_pool_release_retry() stalled pool shutdown: id 57, 48 inflight 363 sec [ 546.301727][T12003] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 546.311346][T12003] ref_tracker: netdev@ffff8881196b8550 has 1/1 users at [ 546.311346][T12003] batadv_hard_if_event+0x6c1/0xf10 [ 546.311346][T12003] raw_notifier_call_chain+0x6f/0x1b0 [ 546.311346][T12003] call_netdevice_notifiers_info+0xae/0x100 [ 546.311346][T12003] register_netdevice+0xd48/0xf00 [ 546.311346][T12003] veth_newlink+0x49b/0x770 [ 546.311346][T12003] rtnl_newlink_create+0x1bc/0x620 [ 546.311346][T12003] rtnl_newlink+0xf29/0x12d0 [ 546.311346][T12003] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 546.311346][T12003] netlink_rcv_skb+0x123/0x220 [ 546.311346][T12003] rtnetlink_rcv+0x1c/0x30 [ 546.311346][T12003] netlink_unicast+0x5bd/0x690 [ 546.311346][T12003] netlink_sendmsg+0x58b/0x6b0 [ 546.311346][T12003] __sock_sendmsg+0x142/0x180 [ 546.311346][T12003] __sys_sendto+0x268/0x330 [ 546.311346][T12003] __x64_sys_sendto+0x76/0x90 [ 546.311346][T12003] x64_sys_call+0x2d05/0x2ff0 [ 546.311346][T12003]