last executing test programs: 1m24.311012167s ago: executing program 4 (id=214): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 1m24.222587827s ago: executing program 4 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1m24.160610778s ago: executing program 4 (id=220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.072559138s ago: executing program 4 (id=226): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m23.427316742s ago: executing program 4 (id=236): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1m22.922534206s ago: executing program 4 (id=253): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, [@exit]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x40042, 0xbc) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x891b, 0x0) sendmsg$sock(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xea0c, 0x8a17, 0xfffffffffffffffb, 0xdc}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x5cf0, &(0x7f0000000780)={0x0, 0x9880, 0x0, 0x0, 0x21f}, &(0x7f0000000400), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f0000001180)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r6, &(0x7f0000000340)="76ed96fc7c36710f33f72a2d584d02105ea0c46db5c75fa3377a1536088a28bda72526e44f407203f5333c9f3b38d32ca367107a1a24750369c445a7529cf564594270115d63870e2bc6bb470e655f1c77c9b6312b8b21700d76abd98f5d76bbaee9b22ee113a81cb8be63496637afdf0c9665b53ffda5201ae8b0a66458d8536e79c4a5b0960ef641ace663f6aa3290fd2fe59a3c89d0d7adbc3bec35ea8f0c5535444ef799f3d4f00bd9342c496e87c726225d588e347255000964b7dec4849a0234f9d63c4a3cc75cfaae1b23087aa07edba9f524722904f7d53467933c474a80", &(0x7f0000000ac0)=""/207}, 0x20) 1m22.891480366s ago: executing program 32 (id=253): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, [@exit]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x40042, 0xbc) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x891b, 0x0) sendmsg$sock(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xea0c, 0x8a17, 0xfffffffffffffffb, 0xdc}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x5cf0, &(0x7f0000000780)={0x0, 0x9880, 0x0, 0x0, 0x21f}, &(0x7f0000000400), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f0000001180)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r6, &(0x7f0000000340)="76ed96fc7c36710f33f72a2d584d02105ea0c46db5c75fa3377a1536088a28bda72526e44f407203f5333c9f3b38d32ca367107a1a24750369c445a7529cf564594270115d63870e2bc6bb470e655f1c77c9b6312b8b21700d76abd98f5d76bbaee9b22ee113a81cb8be63496637afdf0c9665b53ffda5201ae8b0a66458d8536e79c4a5b0960ef641ace663f6aa3290fd2fe59a3c89d0d7adbc3bec35ea8f0c5535444ef799f3d4f00bd9342c496e87c726225d588e347255000964b7dec4849a0234f9d63c4a3cc75cfaae1b23087aa07edba9f524722904f7d53467933c474a80", &(0x7f0000000ac0)=""/207}, 0x20) 1m11.689086758s ago: executing program 2 (id=534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='+j\xf5@\x00\xc9\xd2\xf5\x81\xf7\xc6\x051\xdc\xb1h-OC\xf6\xbd\xd2>\x12`\x0fO|\xf3O+\x9bf\x050\"G\x91\xf9\xb3\rCC\x88y\xb4\xadOF\xd7$\xea4\xfd\nW\xaa\xf0:\xefbj\x9f*Q+\x8c\x9e\x0eY\xb2\x8d\x1aG\x13\x0e\xdb>![\x86yI\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1m11.594467909s ago: executing program 2 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xcd46, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 1m11.295925691s ago: executing program 2 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x13, 0x4, 0x1, 0x4, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_ident={0x2, 0xb, 0x7, 0x0, 0x409}]}, 0x20}}, 0x40800) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x4000000) 1m9.256642254s ago: executing program 2 (id=568): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2964, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 1m9.020051905s ago: executing program 2 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r1) 1m8.32296717s ago: executing program 2 (id=591): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 1m8.29992375s ago: executing program 33 (id=591): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 57.571209809s ago: executing program 3 (id=833): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 57.514163029s ago: executing program 3 (id=834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x1, 0x3, 0x8, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0xb7}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xb74}, &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540), 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1c00) 57.51209948s ago: executing program 3 (id=844): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x40000) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 57.351767061s ago: executing program 3 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 57.312401631s ago: executing program 3 (id=838): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 57.091866042s ago: executing program 3 (id=840): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x214, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") 57.091501662s ago: executing program 34 (id=840): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x214, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 54.32007921s ago: executing program 7 (id=872): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 54.280946851s ago: executing program 7 (id=873): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.204014531s ago: executing program 7 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000c, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 54.125566291s ago: executing program 7 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 53.981237532s ago: executing program 7 (id=882): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5fc9e20a5db2f9e1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") 52.395637092s ago: executing program 7 (id=908): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000700b46e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 52.387829413s ago: executing program 35 (id=908): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000700b46e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 6.024042261s ago: executing program 1 (id=1683): syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x854}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x4044814) 5.863675682s ago: executing program 8 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.626836324s ago: executing program 1 (id=1688): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 5.219429757s ago: executing program 1 (id=1690): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x28020480) gettid() clock_gettime(0xb, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mlockall(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 4.66969048s ago: executing program 5 (id=1693): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x30e5, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x22002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 3.799531236s ago: executing program 5 (id=1697): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='swiotlb_bounced\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(0x0, 0x80) pipe2$9p(&(0x7f0000000240), 0x0) unshare(0x20000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ppoll(&(0x7f00000001c0)=[{r1, 0xc200}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 2.806637862s ago: executing program 5 (id=1702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffd}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffff7, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)={{0x1}}) tkill(r0, 0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = fsopen(0x0, 0x0) fsmount(r2, 0x0, 0x2) chmod(0x0, 0x60) 2.723423303s ago: executing program 5 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 2.604008653s ago: executing program 8 (id=1704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) close(r3) 2.323217045s ago: executing program 1 (id=1705): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000400)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x15, 0x802, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) pwrite64(r1, 0x0, 0x0, 0x8080c61) 1.755433539s ago: executing program 0 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.69978378s ago: executing program 8 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x18) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114009c110000000000000000000000000000000000ff02000000000000000000000000000140000e22009c9078010000000100000090f0160460108d11d936dc939cb76e8a9b6356f73ffcb6da93e8781f9654b4c9799ce6b310bf72a0b28228945546b9e1a0633f625a27749491160b1c9f0f888ec2c820979eee07d947f079121831c3938a8d02659c721e51c0792cd4716ed73937bd34d5dca4454e697e87f5158f1711558536b9fdaf59e8a154a573178b89bb58a02dd1f1c2981a9cd571a7"], 0x0) 1.673134289s ago: executing program 0 (id=1711): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.645829849s ago: executing program 8 (id=1712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, 0x0, 0x20008005) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000004e80), 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.60072632s ago: executing program 1 (id=1713): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.56578555s ago: executing program 1 (id=1714): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.380031801s ago: executing program 6 (id=1715): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETA(r2, 0x5405, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c01b2645c24430c0ac41c7d66e66540f564160000800000da078fd39f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 1.378777122s ago: executing program 6 (id=1716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.264710472s ago: executing program 6 (id=1717): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xb9f1, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x149c3, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.243189502s ago: executing program 5 (id=1718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.155645063s ago: executing program 6 (id=1719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setrlimit(0xe, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000dc8000/0x1000)=nil, 0x1000, 0xa) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.008605404s ago: executing program 5 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/128) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x1b) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r5, 0x2}, 0x8) 525.344907ms ago: executing program 0 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe, 0x1000, 0x101, 0xb, 0x1}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 382.351928ms ago: executing program 0 (id=1722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x9, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x810) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffe6, 0xb}, {0x18, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0x1, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 268.361519ms ago: executing program 6 (id=1723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 254.883808ms ago: executing program 8 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = epoll_create(0xb213) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0xffffc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 176.047549ms ago: executing program 0 (id=1725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x8044084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) semget$private(0x0, 0x20000000102, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 175.649589ms ago: executing program 0 (id=1726): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10007) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x8000) 159.302499ms ago: executing program 8 (id=1727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, &(0x7f00000001c0), {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) 0s ago: executing program 6 (id=1728): r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6c000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0x8d, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) kernel console output (not intermixed with test programs): 046150][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.068213][ T5482] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.638: Invalid inode table block 0 in block_group 0 [ 59.088778][ T5514] loop3: detected capacity change from 0 to 164 [ 59.106453][ T5514] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 59.106452][ T5495] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.122837][ T5482] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 59.137155][ T5482] EXT4-fs error (device loop0): ext4_quota_write:7334: inode #3: comm syz.0.638: mark_inode_dirty error [ 59.147456][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.155682][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.175881][ T5514] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 59.183229][ T5482] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.638: Failed to acquire dquot type 0 [ 59.198937][ T5320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.234924][ T5482] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.638: Invalid inode table block 0 in block_group 0 [ 59.258022][ T5482] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 59.268188][ T5482] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.638: mark_inode_dirty error [ 59.311368][ T5482] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.638: Invalid inode table block 0 in block_group 0 [ 59.351468][ T5482] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 59.381982][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.406636][ T5482] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 59.447321][ T5482] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.638: Invalid inode table block 0 in block_group 0 [ 59.461248][ T5482] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 59.487377][ T5482] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.638: mark_inode_dirty error [ 59.512226][ T5482] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 59.546731][ T5482] EXT4-fs (loop0): 1 truncate cleaned up [ 59.553155][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 59.553176][ T29] audit: type=1326 audit(1762206087.795:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d4137df10 code=0x7ffc0000 [ 59.657452][ T29] audit: type=1326 audit(1762206087.795:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d4137e417 code=0x7ffc0000 [ 59.681231][ T29] audit: type=1326 audit(1762206087.795:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d4137df10 code=0x7ffc0000 [ 59.704842][ T29] audit: type=1326 audit(1762206087.795:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.728417][ T29] audit: type=1326 audit(1762206087.805:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.751932][ T29] audit: type=1326 audit(1762206087.805:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.775515][ T29] audit: type=1326 audit(1762206087.805:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.798857][ T29] audit: type=1326 audit(1762206087.805:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.822183][ T29] audit: type=1326 audit(1762206087.805:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.845653][ T29] audit: type=1326 audit(1762206087.805:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 59.950868][ T5320] veth0_vlan: entered promiscuous mode [ 59.963500][ T5320] veth1_vlan: entered promiscuous mode [ 59.992566][ T5564] loop1: detected capacity change from 0 to 1024 [ 60.005844][ T5320] veth0_macvtap: entered promiscuous mode [ 60.020577][ T5564] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.049531][ T5320] veth1_macvtap: entered promiscuous mode [ 60.085263][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.094779][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.109360][ T4117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119594][ T4117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.130880][ T4117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151916][ T4117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.238583][ T5574] loop3: detected capacity change from 0 to 128 [ 60.245430][ T5574] EXT4-fs: Ignoring removed nobh option [ 60.328494][ T5574] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.341167][ T5584] loop0: detected capacity change from 0 to 164 [ 60.376470][ T5584] Unable to read rock-ridge attributes [ 60.401227][ T5584] Unable to read rock-ridge attributes [ 60.584326][ T5600] loop0: detected capacity change from 0 to 164 [ 60.601645][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 60.643085][ T5600] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 60.683122][ T5600] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.091893][ T5635] loop5: detected capacity change from 0 to 1024 [ 61.116051][ T5635] EXT4-fs: inline encryption not supported [ 61.127877][ T5639] loop3: detected capacity change from 0 to 128 [ 61.139800][ T5639] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.180099][ T5639] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.227691][ T5649] loop6: detected capacity change from 0 to 1024 [ 61.244406][ T4061] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.255112][ T5649] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.318729][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'. [ 61.328062][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.688'. [ 61.429107][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 61.447934][ T5676] team1: entered promiscuous mode [ 61.453089][ T5676] team1: entered allmulticast mode [ 61.464619][ T5676] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.632634][ T5700] loop5: detected capacity change from 0 to 164 [ 61.663821][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 61.690052][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 61.697883][ T5700] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.729782][ T5700] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.754694][ T5710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.823219][ T5710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.838994][ T5728] netlink: 'syz.1.715': attribute type 16 has an invalid length. [ 61.846929][ T5728] netlink: 156 bytes leftover after parsing attributes in process `syz.1.715'. [ 61.899583][ T5710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.980127][ T5746] netlink: 96 bytes leftover after parsing attributes in process `syz.1.724'. [ 62.007285][ T5710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.021405][ T5750] tipc: New replicast peer: 255.255.255.83 [ 62.027541][ T5750] tipc: Enabled bearer , priority 10 [ 62.060848][ T5755] netlink: 'syz.1.727': attribute type 12 has an invalid length. [ 62.089530][ T4071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.134940][ T4071] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.141904][ T5759] xt_CT: No such helper "pptp" [ 62.155606][ T4071] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.174160][ T4071] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.273448][ T5776] syzkaller1: entered promiscuous mode [ 62.279102][ T5776] syzkaller1: entered allmulticast mode [ 62.378315][ T5781] loop5: detected capacity change from 0 to 2048 [ 62.553166][ T5800] bridge0: entered promiscuous mode [ 62.553302][ T5800] bridge0: left promiscuous mode [ 62.578144][ T5806] loop0: detected capacity change from 0 to 512 [ 62.578835][ T5806] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 62.645963][ T5810] loop0: detected capacity change from 0 to 2048 [ 62.694446][ T5817] loop5: detected capacity change from 0 to 256 [ 62.722112][ T5821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 62.856175][ T5825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.908597][ T5832] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.923422][ T5825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.945028][ T5833] loop3: detected capacity change from 0 to 2048 [ 62.967801][ T3720] Alternate GPT is invalid, using primary GPT. [ 62.974151][ T3720] loop3: p1 p2 p3 [ 62.977948][ T3720] loop3: partition table partially beyond EOD, truncated [ 63.004254][ T5833] Alternate GPT is invalid, using primary GPT. [ 63.004924][ T5832] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.010617][ T5833] loop3: p1 p2 p3 [ 63.024793][ T5833] loop3: partition table partially beyond EOD, truncated [ 63.051427][ T1034] tipc: Node number set to 699351146 [ 63.090572][ T5825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.140411][ T5832] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.170150][ T5825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.199939][ T4079] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.210389][ T5832] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.223227][ T5843] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.289679][ T4061] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.302219][ T4061] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.330660][ T4061] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.345824][ T4061] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.354638][ T4061] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.374463][ T4061] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392500][ T4061] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.400969][ T4061] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.449119][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.767'. [ 63.487020][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.767'. [ 63.501826][ T5857] tipc: New replicast peer: 255.255.255.255 [ 63.508157][ T5857] tipc: Enabled bearer , priority 10 [ 63.540026][ T5861] loop5: detected capacity change from 0 to 1024 [ 63.547227][ T5861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.969363][ T5870] loop3: detected capacity change from 0 to 1024 [ 63.980465][ T5870] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.008348][ T5870] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.027524][ T5870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.070020][ T5870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.773: Invalid inode table block 0 in block_group 0 [ 64.083109][ T5870] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 64.092793][ T5870] EXT4-fs error (device loop3): ext4_quota_write:7334: inode #3: comm syz.3.773: mark_inode_dirty error [ 64.122335][ T5870] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.773: Failed to acquire dquot type 0 [ 64.156644][ T5870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.773: Invalid inode table block 0 in block_group 0 [ 64.195554][ T5870] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 64.223260][ T5870] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.773: mark_inode_dirty error [ 64.260857][ T5870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.773: Invalid inode table block 0 in block_group 0 [ 64.296610][ T5870] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 64.306334][ T5870] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 64.317413][ T5870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.773: Invalid inode table block 0 in block_group 0 [ 64.356575][ T5870] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 64.382170][ T5870] EXT4-fs error (device loop3): ext4_truncate:4637: inode #15: comm syz.3.773: mark_inode_dirty error [ 64.426569][ T5870] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 64.435748][ T5870] EXT4-fs (loop3): 1 truncate cleaned up [ 64.457959][ T5883] netlink: 'syz.5.776': attribute type 1 has an invalid length. [ 64.474112][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.489212][ T5883] bond1: (slave dummy0): making interface the new active one [ 64.499970][ T5883] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 64.560552][ T5893] xt_CT: No such helper "pptp" [ 64.591090][ T5898] loop3: detected capacity change from 0 to 1024 [ 64.598778][ T5898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.622925][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 64.623014][ T29] audit: type=1400 audit(1762206092.865:1407): avc: denied { map } for pid=5897 comm="syz.3.783" path="/150/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.660486][ T29] audit: type=1400 audit(1762206092.865:1408): avc: denied { execute } for pid=5897 comm="syz.3.783" path="/150/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.719460][ T5910] tipc: New replicast peer: 255.255.255.83 [ 64.725556][ T5910] tipc: Enabled bearer , priority 10 [ 64.751282][ T29] audit: type=1326 audit(1762206092.995:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.6.784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x0 [ 64.855096][ T5900] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.887659][ T29] audit: type=1326 audit(1762206093.135:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 64.911417][ T29] audit: type=1326 audit(1762206093.135:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 64.935161][ T29] audit: type=1326 audit(1762206093.135:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 64.958959][ T29] audit: type=1326 audit(1762206093.135:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 64.983000][ T29] audit: type=1326 audit(1762206093.135:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 65.006947][ T29] audit: type=1326 audit(1762206093.135:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 65.030882][ T29] audit: type=1326 audit(1762206093.135:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 65.099853][ T5920] loop5: detected capacity change from 0 to 1024 [ 65.108918][ T5920] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.120491][ T5920] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 65.128851][ T5920] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.137909][ T5920] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.790: Invalid inode table block 0 in block_group 0 [ 65.150839][ T5920] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 65.160634][ T5920] EXT4-fs error (device loop5): ext4_quota_write:7334: inode #3: comm syz.5.790: mark_inode_dirty error [ 65.172264][ T5920] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.790: Failed to acquire dquot type 0 [ 65.184112][ T5920] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.790: Invalid inode table block 0 in block_group 0 [ 65.198767][ T5920] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 65.209249][ T5920] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.790: mark_inode_dirty error [ 65.221031][ T5920] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.790: Invalid inode table block 0 in block_group 0 [ 65.234082][ T5920] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 65.243901][ T5920] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 65.253825][ T5920] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.790: Invalid inode table block 0 in block_group 0 [ 65.267056][ T5920] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 65.276777][ T3772] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.276823][ T5920] EXT4-fs error (device loop5): ext4_truncate:4637: inode #15: comm syz.5.790: mark_inode_dirty error [ 65.283069][ T5842] Bluetooth: hci0: command 0x1003 tx timeout [ 65.294212][ T5920] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 65.328490][ T5920] EXT4-fs (loop5): 1 truncate cleaned up [ 65.388537][ T5933] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 65.716808][ T36] tipc: Node number set to 3300415443 [ 65.993801][ T5955] batadv_slave_1: entered promiscuous mode [ 66.000474][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.019119][ T5955] batadv_slave_1 (unregistering): left promiscuous mode [ 66.026195][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.383358][ T5970] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 66.494749][ T5977] __nla_validate_parse: 3 callbacks suppressed [ 66.494764][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 66.520570][ T5977] loop5: detected capacity change from 0 to 1024 [ 66.528431][ T5977] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.541828][ T5977] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 66.554313][ T5977] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.561419][ T5977] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.811: Invalid inode table block 0 in block_group 0 [ 66.574517][ T5977] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 66.584360][ T5977] EXT4-fs error (device loop5): ext4_quota_write:7334: inode #3: comm syz.5.811: mark_inode_dirty error [ 66.596190][ T5977] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.811: Failed to acquire dquot type 0 [ 66.607868][ T5977] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.811: Invalid inode table block 0 in block_group 0 [ 66.621151][ T5977] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 66.631671][ T5977] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.811: mark_inode_dirty error [ 66.643927][ T5977] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.811: Invalid inode table block 0 in block_group 0 [ 66.657271][ T5977] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 66.667910][ T5977] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 66.677142][ T5977] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.811: Invalid inode table block 0 in block_group 0 [ 66.690609][ T5977] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 66.700692][ T5977] EXT4-fs error (device loop5): ext4_truncate:4637: inode #15: comm syz.5.811: mark_inode_dirty error [ 66.712226][ T5977] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 66.721421][ T5977] EXT4-fs (loop5): 1 truncate cleaned up [ 66.823354][ T6002] tipc: Enabled bearer , priority 0 [ 66.834642][ T6002] tipc: Disabling bearer [ 66.853802][ T6005] loop0: detected capacity change from 0 to 512 [ 66.877393][ T6005] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.890841][ T6005] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.823: corrupted xattr block 32: overlapping e_value [ 66.924911][ T6005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 66.934475][ T6005] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.823: corrupted xattr block 32: overlapping e_value [ 66.949219][ T6005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 66.958837][ T6017] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.823: corrupted xattr block 32: overlapping e_value [ 66.973886][ T6017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 66.987678][ T6012] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 197 vs 206 free clusters [ 67.179745][ T6036] wg2: entered promiscuous mode [ 67.184693][ T6036] wg2: entered allmulticast mode [ 67.210604][ T6037] loop0: detected capacity change from 0 to 2048 [ 67.245314][ T6043] ip6t_srh: unknown srh match flags 4000 [ 67.287732][ T6037] Alternate GPT is invalid, using primary GPT. [ 67.294064][ T6037] loop0: p1 p2 p3 [ 67.298101][ T6037] loop0: partition table partially beyond EOD, truncated [ 67.412992][ T6048] batadv_slave_1: entered promiscuous mode [ 67.430228][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'. [ 67.468152][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.493441][ T6048] batadv_slave_1 (unregistering): left promiscuous mode [ 67.501000][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.610394][ T4058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.647694][ T6050] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.679858][ T4058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.710908][ T6050] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.766628][ T4058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.818570][ T6050] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.850406][ T6061] loop5: detected capacity change from 0 to 2048 [ 67.869662][ T4058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.904814][ T6050] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.917340][ T6061] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 68.030973][ T4071] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.060468][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 68.073024][ T4071] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.092740][ T4058] bridge_slave_1: left allmulticast mode [ 68.098484][ T4058] bridge_slave_1: left promiscuous mode [ 68.104195][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.138823][ T4058] bridge_slave_0: left allmulticast mode [ 68.144543][ T4058] bridge_slave_0: left promiscuous mode [ 68.150277][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.261362][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.852'. [ 68.408823][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 68.436943][ T4058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.447453][ T4058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.457829][ T4058] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 68.467692][ T4058] bond0 (unregistering): Released all slaves [ 68.475610][ T4071] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.496325][ T6088] team0: Port device team_slave_1 removed [ 68.509752][ T4071] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.545911][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.553211][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.560809][ T6053] bridge_slave_0: entered allmulticast mode [ 68.568050][ T6053] bridge_slave_0: entered promiscuous mode [ 68.582883][ T4058] tipc: Disabling bearer [ 68.587955][ T4058] tipc: Left network mode [ 68.588084][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.599432][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.607243][ T6053] bridge_slave_1: entered allmulticast mode [ 68.614046][ T6053] bridge_slave_1: entered promiscuous mode [ 68.626224][ T4058] hsr_slave_0: left promiscuous mode [ 68.639854][ T4058] hsr_slave_1: left promiscuous mode [ 68.645879][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.653425][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.662820][ T4058] veth1_macvtap: left promiscuous mode [ 68.668594][ T4058] veth0_macvtap: left promiscuous mode [ 68.674260][ T4058] veth1_vlan: left promiscuous mode [ 68.679651][ T4058] veth0_vlan: left promiscuous mode [ 68.749681][ T4058] team0 (unregistering): Port device team_slave_0 removed [ 68.816381][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.829334][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.854848][ T6053] team0: Port device team_slave_0 added [ 68.862151][ T6053] team0: Port device team_slave_1 added [ 68.888921][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.895955][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.922022][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.934634][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.941679][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.967736][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.995514][ T6053] hsr_slave_0: entered promiscuous mode [ 69.001715][ T6053] hsr_slave_1: entered promiscuous mode [ 69.007806][ T6053] debugfs: 'hsr0' already exists in 'hsr' [ 69.013577][ T6053] Cannot create hsr debugfs directory [ 69.083048][ T6053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.093354][ T6053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.112883][ T6053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.122524][ T6053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.164705][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.182734][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.197621][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.204718][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.214897][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.222080][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.242842][ T6053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.253311][ T6053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.325835][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.353277][ T6136] loop0: detected capacity change from 0 to 2048 [ 69.417294][ T6149] ip6t_srh: unknown srh match flags 4000 [ 69.591652][ T6053] veth0_vlan: entered promiscuous mode [ 69.603053][ T6053] veth1_vlan: entered promiscuous mode [ 69.626003][ T6053] veth0_macvtap: entered promiscuous mode [ 69.634475][ T6053] veth1_macvtap: entered promiscuous mode [ 69.662827][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.694332][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.766852][ T6181] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.802184][ T4071] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.826272][ T4058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.006166][ T4058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.043040][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 70.043058][ T29] audit: type=1400 audit(1762206098.285:1738): avc: denied { mount } for pid=6053 comm="syz-executor" name="/" dev="gadgetfs" ino=4844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.076944][ T4117] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.122765][ T29] audit: type=1400 audit(1762206098.365:1739): avc: denied { read open } for pid=6202 comm="syz.7.841" path="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.195785][ T29] audit: type=1400 audit(1762206098.435:1740): avc: denied { bind } for pid=6205 comm="syz.7.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.236494][ T29] audit: type=1400 audit(1762206098.465:1741): avc: denied { setopt } for pid=6205 comm="syz.7.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.256410][ T29] audit: type=1400 audit(1762206098.475:1742): avc: denied { write } for pid=6205 comm="syz.7.871" path="socket:[13132]" dev="sockfs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.618848][ T29] audit: type=1326 audit(1762206098.865:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 70.642999][ T29] audit: type=1326 audit(1762206098.865:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 70.668277][ T29] audit: type=1326 audit(1762206098.865:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 70.692179][ T29] audit: type=1326 audit(1762206098.865:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 70.715624][ T29] audit: type=1326 audit(1762206098.865:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 70.773833][ T6233] loop5: detected capacity change from 0 to 256 [ 70.783075][ T6233] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 70.792051][ T6233] FAT-fs (loop5): Filesystem has been set read-only [ 70.822797][ T6235] batadv_slave_1: entered promiscuous mode [ 70.832933][ T6235] batman_adv: batadv0: Adding interface: macvlan2 [ 70.839493][ T6235] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.862853][ T6237] loop5: detected capacity change from 0 to 512 [ 70.866292][ T6235] batman_adv: batadv0: Interface activated: macvlan2 [ 70.878941][ T6237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.908839][ T6237] EXT4-fs (loop5): 1 truncate cleaned up [ 70.916910][ T6237] EXT4-fs mount: 36 callbacks suppressed [ 70.916928][ T6237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.052682][ T6237] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.885: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 71.079184][ T6237] EXT4-fs (loop5): Remounting filesystem read-only [ 71.085756][ T6237] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #2: comm syz.5.885: Deleting old file: nlink 5, error=-117 [ 71.126803][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.239568][ T6269] loop0: detected capacity change from 0 to 1024 [ 71.249619][ T6269] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.269100][ T6269] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.278626][ T6269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.286309][ T6269] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.891: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.300021][ T6269] EXT4-fs (loop0): 1 orphan inode deleted [ 71.306240][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.144799][ T6406] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.168320][ T6406] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.222316][ T6406] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.258011][ T6406] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.306689][ T4058] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.340534][ T4086] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.360883][ T4086] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.404648][ T4086] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.426805][ T6434] tipc: Enabling of bearer rejected, failed to enable media [ 72.435940][ T4086] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.483584][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.914'. [ 72.759566][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 72.866219][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.874270][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.881755][ T6436] bridge_slave_0: entered allmulticast mode [ 72.888741][ T6436] bridge_slave_0: entered promiscuous mode [ 72.896104][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.903684][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.911177][ T6436] bridge_slave_1: entered allmulticast mode [ 72.918340][ T6436] bridge_slave_1: entered promiscuous mode [ 72.949651][ T6475] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 72.969545][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.981871][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.018407][ T6436] team0: Port device team_slave_0 added [ 73.039436][ T6436] team0: Port device team_slave_1 added [ 73.079225][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 73.093858][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.100962][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.127232][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.179338][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.186697][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.213184][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.266015][ T4058] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.317160][ T6493] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 73.360369][ T4058] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.395007][ T6436] hsr_slave_0: entered promiscuous mode [ 73.406976][ T6436] hsr_slave_1: entered promiscuous mode [ 73.419744][ T6436] debugfs: 'hsr0' already exists in 'hsr' [ 73.425548][ T6436] Cannot create hsr debugfs directory [ 73.434792][ T6493] macvlan3: entered promiscuous mode [ 73.440221][ T6493] macvlan3: entered allmulticast mode [ 73.449926][ T6493] bond1: entered promiscuous mode [ 73.455327][ T6493] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 73.470482][ T6493] bond1: left promiscuous mode [ 73.480671][ T4058] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.614458][ T6436] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 73.638692][ T4058] bridge_slave_1: left allmulticast mode [ 73.644509][ T4058] bridge_slave_1: left promiscuous mode [ 73.650350][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.658431][ T4058] bridge_slave_0: left allmulticast mode [ 73.664109][ T4058] bridge_slave_0: left promiscuous mode [ 73.670034][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.783570][ T4058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.808891][ T4058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.822011][ T4058] bond0 (unregistering): Released all slaves [ 73.838396][ T6436] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 73.856808][ T6436] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 73.876718][ T6436] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 73.888457][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 73.904757][ T4058] hsr_slave_0: left promiscuous mode [ 73.910789][ T4058] hsr_slave_1: left promiscuous mode [ 73.916695][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.919537][ T6520] loop5: detected capacity change from 0 to 1024 [ 73.924186][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.931973][ T6520] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.948977][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.956615][ T6520] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.956767][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.965017][ T6520] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.982293][ T4058] veth1_macvtap: left promiscuous mode [ 73.988732][ T6520] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.940: Invalid inode table block 0 in block_group 0 [ 74.001618][ T4058] veth0_macvtap: left promiscuous mode [ 74.007755][ T4058] veth1_vlan: left promiscuous mode [ 74.012449][ T6520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 74.013239][ T4058] veth0_vlan: left promiscuous mode [ 74.028926][ T6520] EXT4-fs error (device loop5): ext4_quota_write:7334: inode #3: comm syz.5.940: mark_inode_dirty error [ 74.040558][ T6520] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.940: Failed to acquire dquot type 0 [ 74.064059][ T6520] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.940: Invalid inode table block 0 in block_group 0 [ 74.078504][ T6520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 74.099056][ T6520] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.940: mark_inode_dirty error [ 74.111481][ T6520] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.940: Invalid inode table block 0 in block_group 0 [ 74.129482][ T6520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 74.141750][ T6520] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 74.152102][ T6520] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.940: Invalid inode table block 0 in block_group 0 [ 74.164926][ T4058] team0 (unregistering): Port device team_slave_1 removed [ 74.166480][ T6520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 74.181981][ T4058] team0 (unregistering): Port device team_slave_0 removed [ 74.189418][ T6520] EXT4-fs error (device loop5): ext4_truncate:4637: inode #15: comm syz.5.940: mark_inode_dirty error [ 74.208534][ T6520] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 74.217972][ T6520] EXT4-fs (loop5): 1 truncate cleaned up [ 74.225377][ T6520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.285266][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.310007][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.319309][ T6540] tipc: Started in network mode [ 74.324223][ T6540] tipc: Node identity 0286de3d0a2c, cluster identity 4711 [ 74.331459][ T6540] tipc: Enabled bearer , priority 0 [ 74.345496][ T6538] tipc: Resetting bearer [ 74.365202][ T6538] tipc: Disabling bearer [ 74.377636][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.388069][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.395235][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.419536][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.426814][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.439527][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.947'. [ 74.560686][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.609903][ T6561] netlink: 'syz.0.952': attribute type 13 has an invalid length. [ 74.672531][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.679865][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.723341][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.734605][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.767763][ T4086] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.776279][ T4086] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.790809][ T4061] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.802699][ T4061] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.900993][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 74.907484][ T6436] veth0_vlan: entered promiscuous mode [ 74.918497][ T6436] veth1_vlan: entered promiscuous mode [ 74.935196][ T6436] veth0_macvtap: entered promiscuous mode [ 74.942833][ T6436] veth1_macvtap: entered promiscuous mode [ 74.954345][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.966307][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.979407][ T4117] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002666][ T4117] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022833][ T4117] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043469][ T4117] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.150091][ T6598] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 75.172696][ T6598] macvlan2: entered promiscuous mode [ 75.178428][ T6598] macvlan2: entered allmulticast mode [ 75.185913][ T6598] bond1: entered promiscuous mode [ 75.191674][ T6598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.206157][ T6598] bond1: left promiscuous mode [ 75.379553][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 75.379571][ T29] audit: type=1326 audit(1762206103.625:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.409209][ T29] audit: type=1326 audit(1762206103.625:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.433615][ T29] audit: type=1326 audit(1762206103.675:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.457479][ T29] audit: type=1326 audit(1762206103.675:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.480937][ T29] audit: type=1326 audit(1762206103.675:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.505261][ T29] audit: type=1326 audit(1762206103.745:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.507119][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 75.528682][ T29] audit: type=1326 audit(1762206103.745:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.560897][ T29] audit: type=1326 audit(1762206103.745:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.584522][ T29] audit: type=1326 audit(1762206103.745:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 75.608101][ T29] audit: type=1326 audit(1762206103.745:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d4137f6c9 code=0x7ffc0000 [ 76.032564][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.8.984'. [ 76.061559][ T6652] loop5: detected capacity change from 0 to 2048 [ 76.079779][ T6652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.094114][ T6652] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 76.121744][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.166266][ T6664] loop8: detected capacity change from 0 to 512 [ 76.179947][ T6664] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.223771][ T6436] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 76.268368][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.993'. [ 76.499363][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.506623][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.570491][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.581941][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.619610][ T6687] batman_adv: batadv0: Interface deactivated: macvlan2 [ 76.682735][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.690187][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.717794][ T6698] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.772439][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.837980][ T4117] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.856727][ T4117] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.889260][ T4117] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.915147][ T4117] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.939741][ T4117] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.955613][ T4117] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.969165][ T4117] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.977775][ T4117] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.015352][ T6717] netem: change failed [ 77.195224][ T6740] netlink: 'syz.5.1013': attribute type 4 has an invalid length. [ 77.605194][ T6768] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1029'. [ 77.670603][ T6772] tipc: New replicast peer: 255.255.255.83 [ 77.676703][ T6772] tipc: Enabled bearer , priority 10 [ 77.684455][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 77.876843][ T6790] pimreg: entered allmulticast mode [ 77.883732][ T6790] pimreg: left allmulticast mode [ 77.992118][ T6801] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.007033][ T6803] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 78.020951][ T6803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.044452][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 78.057767][ T6803] bond2 (unregistering): Released all slaves [ 78.357499][ T6823] netlink: 'syz.1.1051': attribute type 13 has an invalid length. [ 78.520417][ T6838] loop5: detected capacity change from 0 to 512 [ 78.551729][ T6838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.577279][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.686585][ T3388] tipc: Node number set to 145415741 [ 78.829439][ T6856] loop8: detected capacity change from 0 to 512 [ 78.839436][ T6856] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 78.849620][ T6856] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1064: bg 0: block 104: invalid block bitmap [ 78.863654][ T6856] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 78.873756][ T6856] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1064: invalid indirect mapped block 1 (level 1) [ 78.887641][ T6856] EXT4-fs (loop8): 1 truncate cleaned up [ 78.893705][ T6856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.919046][ T6436] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.314398][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 79.841162][ T6896] pim6reg1: entered promiscuous mode [ 79.846809][ T6896] pim6reg1: entered allmulticast mode [ 79.862590][ T6900] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1081'. [ 79.871963][ T6900] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1081'. [ 79.906842][ T6902] loop5: detected capacity change from 0 to 128 [ 79.971327][ T6907] syzkaller0: entered promiscuous mode [ 79.977085][ T6907] syzkaller0: entered allmulticast mode [ 79.987067][ T6902] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.001230][ T6902] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.059215][ T4193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.290440][ T6951] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1105'. [ 80.300027][ T6951] netlink: zone id is out of range [ 80.305310][ T6951] netlink: zone id is out of range [ 80.324582][ T6951] netlink: zone id is out of range [ 80.340065][ T6951] netlink: zone id is out of range [ 80.351897][ T6958] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1109'. [ 80.361587][ T6951] netlink: set zone limit has 8 unknown bytes [ 80.421574][ T6967] bridge: RTM_NEWNEIGH with invalid ether address [ 80.452427][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 80.452446][ T29] audit: type=1326 audit(1762206108.695:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4137f6c9 code=0x0 [ 80.672645][ T6983] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.692242][ T29] audit: type=1400 audit(1762206108.935:2321): avc: denied { nlmsg_read } for pid=6980 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.074123][ T29] audit: type=1326 audit(1762206109.315:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.098970][ T29] audit: type=1326 audit(1762206109.315:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.123861][ T29] audit: type=1326 audit(1762206109.315:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.148049][ T29] audit: type=1326 audit(1762206109.315:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.171449][ T29] audit: type=1326 audit(1762206109.315:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.195077][ T29] audit: type=1326 audit(1762206109.315:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.218636][ T29] audit: type=1326 audit(1762206109.315:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.241953][ T29] audit: type=1326 audit(1762206109.315:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 81.305230][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1124'. [ 81.383403][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1126'. [ 81.502553][ T7009] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1130'. [ 81.681096][ T7036] tipc: Started in network mode [ 81.686088][ T7036] tipc: Node identity ac14140f, cluster identity 4711 [ 81.700764][ T7036] tipc: New replicast peer: 255.255.255.255 [ 81.706973][ T7036] tipc: Enabled bearer , priority 10 [ 81.901208][ T7061] loop5: detected capacity change from 0 to 1024 [ 81.929217][ T7061] EXT4-fs: Ignoring removed orlov option [ 81.951259][ T7061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.013051][ T7070] loop8: detected capacity change from 0 to 512 [ 82.049800][ T7070] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 82.263970][ T7070] EXT4-fs (loop8): orphan cleanup on readonly fs [ 82.272775][ T7070] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.1155: corrupted inode contents [ 82.285395][ T7070] EXT4-fs (loop8): Remounting filesystem read-only [ 82.285594][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.292223][ T7070] EXT4-fs (loop8): 1 truncate cleaned up [ 82.311776][ T4061] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.322486][ T4061] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.343352][ T4061] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.376961][ T7070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.399071][ T7070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.430398][ T7082] loop5: detected capacity change from 0 to 128 [ 82.447053][ T7082] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 82.455059][ T7082] FAT-fs (loop5): Filesystem has been set read-only [ 82.484191][ T7082] bio_check_eod: 110 callbacks suppressed [ 82.484209][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.484209][ T7082] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.505231][ T7082] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 82.513137][ T7082] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 82.521563][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.521563][ T7082] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.535588][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.535588][ T7082] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.549834][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.549834][ T7082] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.587947][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.587947][ T7082] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.602062][ T7082] syz.5.1158: attempt to access beyond end of device [ 82.602062][ T7082] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.616691][ T7087] syz.5.1158: attempt to access beyond end of device [ 82.616691][ T7087] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 82.623217][ T7091] __nla_validate_parse: 2 callbacks suppressed [ 82.623289][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1164'. [ 82.630234][ T7087] buffer_io_error: 42 callbacks suppressed [ 82.630253][ T7087] Buffer I/O error on dev loop5, logical block 2065, async page read [ 82.665409][ T7087] syz.5.1158: attempt to access beyond end of device [ 82.665409][ T7087] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 82.679147][ T7087] Buffer I/O error on dev loop5, logical block 2066, async page read [ 82.691866][ T7087] syz.5.1158: attempt to access beyond end of device [ 82.691866][ T7087] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 82.705241][ T7087] Buffer I/O error on dev loop5, logical block 2067, async page read [ 82.714279][ T7087] syz.5.1158: attempt to access beyond end of device [ 82.714279][ T7087] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 82.727675][ T7087] Buffer I/O error on dev loop5, logical block 2068, async page read [ 82.738190][ T7087] Buffer I/O error on dev loop5, logical block 2069, async page read [ 82.741423][ T7093] pim6reg1: entered promiscuous mode [ 82.746558][ T7087] Buffer I/O error on dev loop5, logical block 2070, async page read [ 82.751805][ T7093] pim6reg1: entered allmulticast mode [ 82.760026][ T7087] Buffer I/O error on dev loop5, logical block 2071, async page read [ 82.790395][ T7087] Buffer I/O error on dev loop5, logical block 2072, async page read [ 82.799546][ T7087] Buffer I/O error on dev loop5, logical block 2065, async page read [ 82.807833][ T7087] Buffer I/O error on dev loop5, logical block 2066, async page read [ 82.817290][ T7097] netlink: 'syz.1.1166': attribute type 4 has an invalid length. [ 82.836473][ T2968] tipc: Node number set to 2886997007 [ 82.891618][ T7101] loop8: detected capacity change from 0 to 128 [ 82.986998][ T7107] ref_ctr_offset mismatch. inode: 0x57d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 83.468546][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1177'. [ 83.527943][ T7134] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.617253][ T7202] loop8: detected capacity change from 0 to 512 [ 84.636704][ T7202] journal_path: Non-blockdev passed as './file0' [ 84.643940][ T7202] EXT4-fs: error: could not find journal device path [ 85.184358][ T7225] loop5: detected capacity change from 0 to 1024 [ 85.218503][ T7225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.246535][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.323490][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 85.385590][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 85.402728][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 85.413467][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 85.423387][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 85.525713][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 85.525795][ T29] audit: type=1326 audit(1762206113.765:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.569240][ T7255] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1222'. [ 85.583141][ T7255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.589827][ T29] audit: type=1326 audit(1762206113.765:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.616409][ T29] audit: type=1326 audit(1762206113.765:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.640919][ T29] audit: type=1326 audit(1762206113.765:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.671851][ T29] audit: type=1326 audit(1762206113.765:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.695696][ T29] audit: type=1326 audit(1762206113.765:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.719449][ T29] audit: type=1326 audit(1762206113.765:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.743387][ T29] audit: type=1326 audit(1762206113.765:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.767255][ T29] audit: type=1326 audit(1762206113.765:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.790876][ T29] audit: type=1326 audit(1762206113.765:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 85.826257][ T7255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.849175][ T7255] bond0 (unregistering): Released all slaves [ 85.991425][ T7275] loop5: detected capacity change from 0 to 512 [ 86.027510][ T7275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.052358][ T7275] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.063901][ T7275] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.424489][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 86.612608][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 86.820048][ T7321] loop8: detected capacity change from 0 to 1024 [ 86.839009][ T7321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.897888][ T6436] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.684769][ T7377] loop8: detected capacity change from 0 to 1024 [ 87.792800][ T7377] EXT4-fs: Ignoring removed orlov option [ 87.943168][ T7377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.232815][ T7386] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.485729][ T7386] SELinux: failed to load policy [ 88.613143][ T6436] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.232336][ T7413] __nla_validate_parse: 2 callbacks suppressed [ 89.232352][ T7413] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1279'. [ 89.288026][ T7413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.327361][ T7413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.346869][ T7413] bond0 (unregistering): Released all slaves [ 90.151341][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1289'. [ 90.181658][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 90.323223][ T7448] syz_tun: entered allmulticast mode [ 90.329689][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 90.339209][ T7448] syz_tun (unregistering): left allmulticast mode [ 90.410372][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'. [ 90.537877][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 90.537895][ T29] audit: type=1326 audit(1762206118.785:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x0 [ 90.644272][ T7458] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.730464][ T7461] loop5: detected capacity change from 0 to 128 [ 90.743032][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.750953][ T7461] FAT-fs (loop5): Filesystem has been set read-only [ 90.757665][ T29] audit: type=1326 audit(1762206118.985:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.759720][ T7461] bio_check_eod: 32468 callbacks suppressed [ 90.759824][ T7461] syz.5.1299: attempt to access beyond end of device [ 90.759824][ T7461] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 90.781313][ T29] audit: type=1326 audit(1762206118.985:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.781353][ T29] audit: type=1326 audit(1762206118.995:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.787798][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.801193][ T29] audit: type=1326 audit(1762206118.995:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.825050][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.848630][ T29] audit: type=1326 audit(1762206118.995:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.911487][ T29] audit: type=1326 audit(1762206118.995:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.913731][ T7461] syz.5.1299: attempt to access beyond end of device [ 90.913731][ T7461] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.935056][ T29] audit: type=1326 audit(1762206118.995:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.935090][ T29] audit: type=1326 audit(1762206118.995:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.935118][ T29] audit: type=1326 audit(1762206118.995:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 90.949768][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.983254][ T7467] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1301'. [ 91.036458][ T7461] syz.5.1299: attempt to access beyond end of device [ 91.036458][ T7461] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.042538][ T7467] tipc: Enabling of bearer rejected, failed to enable media [ 91.076401][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 91.084424][ T7461] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 91.097992][ T7461] syz.5.1299: attempt to access beyond end of device [ 91.097992][ T7461] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.111750][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.111750][ T7465] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 91.125412][ T7465] buffer_io_error: 32462 callbacks suppressed [ 91.125432][ T7465] Buffer I/O error on dev loop5, logical block 2065, async page read [ 91.141935][ T7476] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1303'. [ 91.151426][ T7476] netlink: zone id is out of range [ 91.156680][ T7476] netlink: zone id is out of range [ 91.163005][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1302'. [ 91.169904][ T7476] netlink: zone id is out of range [ 91.177100][ T7476] netlink: zone id is out of range [ 91.182348][ T7476] netlink: zone id is out of range [ 91.188575][ T7476] netlink: zone id is out of range [ 91.193739][ T7476] netlink: zone id is out of range [ 91.195896][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.195896][ T7465] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 91.198920][ T7476] netlink: zone id is out of range [ 91.198930][ T7476] netlink: zone id is out of range [ 91.198937][ T7476] netlink: zone id is out of range [ 91.228068][ T7465] Buffer I/O error on dev loop5, logical block 2066, async page read [ 91.237637][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.237637][ T7465] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 91.251033][ T7465] Buffer I/O error on dev loop5, logical block 2067, async page read [ 91.259797][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.259797][ T7465] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 91.273271][ T7465] Buffer I/O error on dev loop5, logical block 2068, async page read [ 91.281663][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.281663][ T7465] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 91.295075][ T7465] Buffer I/O error on dev loop5, logical block 2069, async page read [ 91.303525][ T7465] syz.5.1299: attempt to access beyond end of device [ 91.303525][ T7465] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 91.316960][ T7465] Buffer I/O error on dev loop5, logical block 2070, async page read [ 91.326197][ T7465] Buffer I/O error on dev loop5, logical block 2071, async page read [ 91.334433][ T7465] Buffer I/O error on dev loop5, logical block 2072, async page read [ 91.342809][ T7461] Buffer I/O error on dev loop5, logical block 2065, async page read [ 91.352274][ T7461] Buffer I/O error on dev loop5, logical block 2066, async page read [ 91.706938][ T7510] loop8: detected capacity change from 0 to 1024 [ 91.726566][ T7510] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 91.813500][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1318'. [ 91.846964][ T7514] team0: Port device team_slave_1 removed [ 91.884823][ T7517] loop8: detected capacity change from 0 to 1024 [ 91.908470][ T7517] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.931394][ T7517] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 91.948393][ T7517] EXT4-fs (loop8): orphan cleanup on readonly fs [ 91.963042][ T7517] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1318: Invalid inode table block 0 in block_group 0 [ 91.977136][ T7517] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 92.011839][ T7517] EXT4-fs error (device loop8): ext4_quota_write:7334: inode #3: comm syz.8.1318: mark_inode_dirty error [ 92.037658][ T7517] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.1318: Failed to acquire dquot type 0 [ 92.086539][ T7517] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1318: Invalid inode table block 0 in block_group 0 [ 92.102080][ T7517] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 92.111862][ T7517] EXT4-fs error (device loop8): ext4_ext_truncate:4475: inode #15: comm syz.8.1318: mark_inode_dirty error [ 92.125277][ T7517] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1318: Invalid inode table block 0 in block_group 0 [ 92.156819][ T7517] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 92.167519][ T7517] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 92.177385][ T7524] netlink: 660 bytes leftover after parsing attributes in process `syz.5.1321'. [ 92.198973][ T7517] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1318: Invalid inode table block 0 in block_group 0 [ 92.216638][ T7527] loop5: detected capacity change from 0 to 512 [ 92.223369][ T7517] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 92.234923][ T7527] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.246679][ T7517] EXT4-fs error (device loop8): ext4_truncate:4637: inode #15: comm syz.8.1318: mark_inode_dirty error [ 92.261415][ T7527] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 92.286208][ T4061] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.301360][ T7517] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 92.312202][ T7517] EXT4-fs (loop8): 1 truncate cleaned up [ 92.318744][ T7517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.401706][ T7540] SELinux: failed to load policy [ 92.412836][ T6436] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.571287][ T7553] syz_tun: entered allmulticast mode [ 92.619835][ T7553] syz_tun (unregistering): left allmulticast mode [ 93.169451][ T7584] bridge0: entered promiscuous mode [ 93.174893][ T7584] vlan2: entered promiscuous mode [ 93.231047][ T7587] syz_tun: entered allmulticast mode [ 93.237995][ T7586] syz_tun: left allmulticast mode [ 93.311442][ T7589] loop5: detected capacity change from 0 to 2048 [ 93.348466][ T7589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.371738][ T7589] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.474151][ T4061] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set [ 93.524485][ T4061] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 64 with error 117 [ 93.537196][ T4061] EXT4-fs (loop5): This should not happen!! Data will be lost [ 93.537196][ T4061] [ 93.610283][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.994654][ T7662] loop8: detected capacity change from 0 to 128 [ 94.015114][ T7662] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.040546][ T7662] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.329772][ T7677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7677 comm=syz.8.1372 [ 94.461653][ T7683] 9pnet: Could not find request transport: fd0x0000000000000003 [ 95.383259][ T7680] syz.8.1374 (7680) used greatest stack depth: 7048 bytes left [ 95.617405][ T7745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.902031][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 95.902048][ T29] audit: type=1326 audit(1762206124.145:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.1.1394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x0 [ 96.016222][ T7749] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.588360][ T29] audit: type=1400 audit(1762206124.835:2980): avc: denied { create } for pid=7766 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.614624][ T7770] __nla_validate_parse: 3 callbacks suppressed [ 96.614642][ T7770] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 96.669523][ T7772] syzkaller0: entered promiscuous mode [ 96.675091][ T7772] syzkaller0: entered allmulticast mode [ 96.677124][ T29] audit: type=1400 audit(1762206124.915:2981): avc: denied { connect } for pid=7775 comm="syz.8.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.823815][ T7787] loop5: detected capacity change from 0 to 128 [ 96.833552][ T7787] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.848471][ T7787] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.866286][ T29] audit: type=1400 audit(1762206125.105:2982): avc: denied { create } for pid=7790 comm="wg1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.972703][ T29] audit: type=1326 audit(1762206125.215:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.1.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x0 [ 97.037907][ T7800] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.075118][ T4193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.149900][ T7807] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1413'. [ 97.260281][ T7822] tipc: Enabled bearer , priority 0 [ 97.267837][ T7822] syzkaller0: entered promiscuous mode [ 97.273320][ T7822] syzkaller0: entered allmulticast mode [ 97.282154][ T7822] tipc: Resetting bearer [ 97.288686][ T7821] tipc: Resetting bearer [ 97.295698][ T7821] tipc: Disabling bearer [ 97.395217][ T7830] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1420'. [ 97.581963][ T29] audit: type=1326 audit(1762206125.825:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.6.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 97.636726][ T29] audit: type=1326 audit(1762206125.845:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.6.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 97.660474][ T29] audit: type=1326 audit(1762206125.845:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.6.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 97.683941][ T29] audit: type=1326 audit(1762206125.845:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.6.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 97.707421][ T29] audit: type=1326 audit(1762206125.845:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.6.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 97.862206][ T7850] tipc: Cannot configure node identity twice [ 97.967972][ T7857] netlink: 'syz.8.1433': attribute type 4 has an invalid length. [ 97.979229][ T7857] netlink: 'syz.8.1433': attribute type 4 has an invalid length. [ 98.015172][ T7859] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1434'. [ 98.190222][ T7865] macsec0: entered promiscuous mode [ 98.400562][ T7879] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.746914][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 99.788676][ T7919] cgroup: fork rejected by pids controller in /syz1 [ 99.795518][ T4193] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 99.806834][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.806862][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.806876][ T4193] Call Trace: [ 99.806882][ T4193] [ 99.806889][ T4193] __dump_stack+0x1d/0x30 [ 99.807012][ T4193] dump_stack_lvl+0xe8/0x140 [ 99.807077][ T4193] dump_stack+0x15/0x1b [ 99.807101][ T4193] dump_header+0x81/0x220 [ 99.807127][ T4193] oom_kill_process+0x342/0x400 [ 99.807191][ T4193] out_of_memory+0x979/0xb80 [ 99.807228][ T4193] try_charge_memcg+0x610/0xa10 [ 99.807291][ T4193] charge_memcg+0x51/0xc0 [ 99.807319][ T4193] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 99.807346][ T4193] __read_swap_cache_async+0x17b/0x2d0 [ 99.807371][ T4193] swap_cluster_readahead+0x362/0x3c0 [ 99.807517][ T4193] swapin_readahead+0xde/0x6f0 [ 99.807547][ T4193] ? css_rstat_updated+0xb7/0x240 [ 99.807573][ T4193] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 99.807615][ T4193] ? __rcu_read_unlock+0x4f/0x70 [ 99.807640][ T4193] ? __rcu_read_unlock+0x4f/0x70 [ 99.807706][ T4193] ? swap_cache_get_folio+0x277/0x280 [ 99.807732][ T4193] do_swap_page+0x2ae/0x2370 [ 99.807816][ T4193] ? _raw_spin_unlock+0x26/0x50 [ 99.807842][ T4193] ? finish_task_switch+0xad/0x2b0 [ 99.807901][ T4193] ? __pfx_default_wake_function+0x10/0x10 [ 99.807940][ T4193] handle_mm_fault+0x9a5/0x2be0 [ 99.807966][ T4193] ? vma_start_read+0x141/0x1f0 [ 99.808005][ T4193] do_user_addr_fault+0x630/0x1080 [ 99.808071][ T4193] ? fpregs_restore_userregs+0xe2/0x1d0 [ 99.808163][ T4193] ? switch_fpu_return+0xe/0x20 [ 99.808203][ T4193] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.808233][ T4193] exc_page_fault+0x62/0xa0 [ 99.808314][ T4193] asm_exc_page_fault+0x26/0x30 [ 99.808374][ T4193] RIP: 0033:0x7fcedb031f45 [ 99.808394][ T4193] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 99.808412][ T4193] RSP: 002b:00007ffd2e9f35b8 EFLAGS: 00010246 [ 99.808428][ T4193] RAX: 0000000000000000 RBX: 0000000000000220 RCX: 00007fcedb031f43 [ 99.808444][ T4193] RDX: 00007ffd2e9f35d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.808460][ T4193] RBP: 00007ffd2e9f363c R08: 000000002af5970e R09: 0000000000000000 [ 99.808521][ T4193] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 99.808532][ T4193] R13: 00000000000927c0 R14: 000000000001833b R15: 00007ffd2e9f3690 [ 99.808553][ T4193] [ 99.808562][ T4193] memory: usage 307200kB, limit 307200kB, failcnt 147 [ 100.062662][ T4193] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 100.070623][ T4193] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 100.078052][ T4193] Memory cgroup stats for /syz5: [ 100.078626][ T4193] cache 0 [ 100.086577][ T4193] rss 0 [ 100.089354][ T4193] shmem 0 [ 100.092362][ T4193] mapped_file 0 [ 100.095837][ T4193] dirty 0 [ 100.098841][ T4193] writeback 0 [ 100.102135][ T4193] workingset_refault_anon 1105 [ 100.106946][ T4193] workingset_refault_file 0 [ 100.111462][ T4193] swap 401408 [ 100.114758][ T4193] swapcached 0 [ 100.118293][ T4193] pgpgin 80119 [ 100.121683][ T4193] pgpgout 80118 [ 100.125202][ T4193] pgfault 74792 [ 100.128719][ T4193] pgmajfault 184 [ 100.132279][ T4193] inactive_anon 0 [ 100.136006][ T4193] active_anon 0 [ 100.139534][ T4193] inactive_file 0 [ 100.143182][ T4193] active_file 4096 [ 100.146943][ T4193] unevictable 0 [ 100.150424][ T4193] hierarchical_memory_limit 314572800 [ 100.155809][ T4193] hierarchical_memsw_limit 9223372036854771712 [ 100.162099][ T4193] total_cache 0 [ 100.165576][ T4193] total_rss 0 [ 100.168939][ T4193] total_shmem 0 [ 100.172461][ T4193] total_mapped_file 0 [ 100.176482][ T4193] total_dirty 0 [ 100.179953][ T4193] total_writeback 0 [ 100.183773][ T4193] total_workingset_refault_anon 1105 [ 100.189126][ T4193] total_workingset_refault_file 0 [ 100.194270][ T4193] total_swap 401408 [ 100.198156][ T4193] total_swapcached 0 [ 100.202066][ T4193] total_pgpgin 80119 [ 100.206047][ T4193] total_pgpgout 80118 [ 100.210164][ T4193] total_pgfault 74792 [ 100.214229][ T4193] total_pgmajfault 184 [ 100.218393][ T4193] total_inactive_anon 0 [ 100.222565][ T4193] total_active_anon 0 [ 100.226629][ T4193] total_inactive_file 0 [ 100.230794][ T4193] total_active_file 4096 [ 100.235070][ T4193] total_unevictable 0 [ 100.239097][ T4193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1445,pid=7895,uid=0 [ 100.253808][ T4193] Memory cgroup out of memory: Killed process 7895 (syz.5.1445) total-vm:96136kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 101.003504][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 101.003519][ T29] audit: type=1326 audit(1762206129.245:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.053652][ T29] audit: type=1326 audit(1762206129.295:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.077318][ T29] audit: type=1326 audit(1762206129.295:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.101402][ T29] audit: type=1326 audit(1762206129.295:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.148807][ T29] audit: type=1326 audit(1762206129.295:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.172588][ T29] audit: type=1326 audit(1762206129.295:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.196923][ T29] audit: type=1326 audit(1762206129.295:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.220625][ T29] audit: type=1326 audit(1762206129.375:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.244427][ T29] audit: type=1326 audit(1762206129.375:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.267978][ T29] audit: type=1326 audit(1762206129.375:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.8.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x7ffc0000 [ 101.307055][ T8068] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.375510][ T8068] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.401173][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 101.412968][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.435166][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.457142][ T8068] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.531162][ T8068] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.577213][ T8080] -1: renamed from syzkaller0 [ 101.599540][ T4117] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.622321][ T4117] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.636399][ T4117] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.645884][ T4117] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.673198][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1486'. [ 101.706255][ T8086] loop5: detected capacity change from 0 to 128 [ 101.723334][ T8086] EXT4-fs: Ignoring removed nobh option [ 101.739958][ T8086] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.752894][ T8084] veth5: entered promiscuous mode [ 101.758217][ T8084] veth5: entered allmulticast mode [ 101.765666][ T8084] bridge1: port 1(veth5) entered blocking state [ 101.772129][ T8084] bridge1: port 1(veth5) entered disabled state [ 101.780059][ T8084] bridge1: port 1(veth5) entered blocking state [ 101.786486][ T8084] bridge1: port 1(veth5) entered forwarding state [ 101.794173][ T8086] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.854212][ T4193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.871646][ T8084] veth7: entered promiscuous mode [ 101.877125][ T8084] veth7: entered allmulticast mode [ 101.947098][ T8084] bridge1: port 2(veth7) entered blocking state [ 101.953927][ T8084] bridge1: port 2(veth7) entered disabled state [ 101.962410][ T8084] bridge1: port 2(veth7) entered blocking state [ 101.968778][ T8084] bridge1: port 2(veth7) entered forwarding state [ 102.386885][ T4100] bridge1: port 1(veth5) entered disabled state [ 102.395080][ T4100] bridge1: port 2(veth7) entered disabled state [ 103.481836][ T8164] loop5: detected capacity change from 0 to 1024 [ 103.489193][ T8164] EXT4-fs: inline encryption not supported [ 103.495301][ T8164] EXT4-fs: Ignoring removed bh option [ 103.516726][ T8164] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 103.952570][ T8192] pim6reg: entered allmulticast mode [ 103.964424][ T8192] pim6reg: left allmulticast mode [ 104.724782][ T8217] netlink: 'syz.1.1527': attribute type 12 has an invalid length. [ 105.072118][ T8244] netlink: 'syz.8.1537': attribute type 12 has an invalid length. [ 105.080247][ T8244] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1537'. [ 105.418867][ T8253] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.469168][ T8255] netlink: 'syz.8.1540': attribute type 4 has an invalid length. [ 105.495342][ T8255] netlink: 'syz.8.1540': attribute type 4 has an invalid length. [ 105.880795][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1546'. [ 105.891380][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1546'. [ 105.900516][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1546'. [ 105.911432][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1546'. [ 106.706016][ T8271] syz.1.1545 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 106.720287][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.1.1545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.720315][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.720401][ T8271] Call Trace: [ 106.720445][ T8271] [ 106.720456][ T8271] __dump_stack+0x1d/0x30 [ 106.720555][ T8271] dump_stack_lvl+0xe8/0x140 [ 106.720581][ T8271] dump_stack+0x15/0x1b [ 106.720658][ T8271] dump_header+0x81/0x220 [ 106.720694][ T8271] oom_kill_process+0x342/0x400 [ 106.720862][ T8271] out_of_memory+0x979/0xb80 [ 106.720910][ T8271] try_charge_memcg+0x610/0xa10 [ 106.720957][ T8271] obj_cgroup_charge_pages+0xa6/0x150 [ 106.721041][ T8271] __memcg_kmem_charge_page+0x9f/0x170 [ 106.721063][ T8271] __alloc_frozen_pages_noprof+0x188/0x360 [ 106.721096][ T8271] alloc_pages_mpol+0xb3/0x260 [ 106.721168][ T8271] ? alloc_pages_noprof+0x61/0x130 [ 106.721258][ T8271] alloc_pages_noprof+0x90/0x130 [ 106.721286][ T8271] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 106.721435][ T8271] __kvmalloc_node_noprof+0x483/0x670 [ 106.721481][ T8271] ? ip_set_alloc+0x24/0x30 [ 106.721524][ T8271] ? ip_set_alloc+0x24/0x30 [ 106.721596][ T8271] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 106.721734][ T8271] ip_set_alloc+0x24/0x30 [ 106.721767][ T8271] hash_netiface_create+0x282/0x740 [ 106.721893][ T8271] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.721940][ T8271] ip_set_create+0x3cc/0x970 [ 106.722049][ T8271] ? __nla_parse+0x40/0x60 [ 106.722074][ T8271] nfnetlink_rcv_msg+0x4c6/0x590 [ 106.722134][ T8271] netlink_rcv_skb+0x123/0x220 [ 106.722180][ T8271] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.722247][ T8271] nfnetlink_rcv+0x167/0x16c0 [ 106.722298][ T8271] ? __list_del_entry_valid_or_report+0x65/0x130 [ 106.722332][ T8271] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 106.722409][ T8271] ? should_fail_ex+0x30/0x280 [ 106.722435][ T8271] ? selinux_nlmsg_lookup+0x99/0x890 [ 106.722471][ T8271] ? __rcu_read_unlock+0x34/0x70 [ 106.722535][ T8271] ? __netlink_lookup+0x266/0x2a0 [ 106.722558][ T8271] netlink_unicast+0x5c0/0x690 [ 106.722595][ T8271] netlink_sendmsg+0x58b/0x6b0 [ 106.722625][ T8271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.722667][ T8271] __sock_sendmsg+0x145/0x180 [ 106.722710][ T8271] ____sys_sendmsg+0x31e/0x4e0 [ 106.722800][ T8271] ___sys_sendmsg+0x17b/0x1d0 [ 106.722898][ T8271] __x64_sys_sendmsg+0xd4/0x160 [ 106.722929][ T8271] x64_sys_call+0x191e/0x3000 [ 106.722953][ T8271] do_syscall_64+0xd2/0x200 [ 106.722977][ T8271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.723018][ T8271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.723053][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.723119][ T8271] RIP: 0033:0x7fe1447bf6c9 [ 106.723139][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.723163][ T8271] RSP: 002b:00007fe14321f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.723189][ T8271] RAX: ffffffffffffffda RBX: 00007fe144a15fa0 RCX: 00007fe1447bf6c9 [ 106.723207][ T8271] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 106.723240][ T8271] RBP: 00007fe144841f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.723253][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.723265][ T8271] R13: 00007fe144a16038 R14: 00007fe144a15fa0 R15: 00007ffebd73e208 [ 106.723287][ T8271] [ 106.723613][ T8271] memory: usage 307200kB, limit 307200kB, failcnt 711 [ 107.062203][ T8271] memory+swap: usage 308200kB, limit 9007199254740988kB, failcnt 0 [ 107.070340][ T8271] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 107.077706][ T8271] Memory cgroup stats for /syz1: [ 107.078166][ T8271] cache 0 [ 107.086201][ T8271] rss 0 [ 107.089020][ T8271] shmem 0 [ 107.092027][ T8271] mapped_file 0 [ 107.095519][ T8271] dirty 0 [ 107.098538][ T8271] writeback 0 [ 107.101856][ T8271] workingset_refault_anon 652 [ 107.106991][ T8271] workingset_refault_file 511 [ 107.111752][ T8271] swap 1024000 [ 107.115135][ T8271] swapcached 20480 [ 107.118947][ T8271] pgpgin 141758 [ 107.122516][ T8271] pgpgout 141753 [ 107.126090][ T8271] pgfault 103643 [ 107.129833][ T8271] pgmajfault 125 [ 107.133398][ T8271] inactive_anon 0 [ 107.137099][ T8271] active_anon 20480 [ 107.141016][ T8271] inactive_file 0 [ 107.144743][ T8271] active_file 0 [ 107.148263][ T8271] unevictable 0 [ 107.151749][ T8271] hierarchical_memory_limit 314572800 [ 107.157164][ T8271] hierarchical_memsw_limit 9223372036854771712 [ 107.163358][ T8271] total_cache 0 [ 107.166934][ T8271] total_rss 0 [ 107.170510][ T8271] total_shmem 0 [ 107.174219][ T8271] total_mapped_file 0 [ 107.178354][ T8271] total_dirty 0 [ 107.181838][ T8271] total_writeback 0 [ 107.185732][ T8271] total_workingset_refault_anon 652 [ 107.191273][ T8271] total_workingset_refault_file 511 [ 107.196547][ T8271] total_swap 1024000 [ 107.200463][ T8271] total_swapcached 20480 [ 107.204726][ T8271] total_pgpgin 141758 [ 107.208784][ T8271] total_pgpgout 141753 [ 107.212900][ T8271] total_pgfault 103643 [ 107.217025][ T8271] total_pgmajfault 125 [ 107.221124][ T8271] total_inactive_anon 0 [ 107.225284][ T8271] total_active_anon 20480 [ 107.229772][ T8271] total_inactive_file 0 [ 107.234121][ T8271] total_active_file 0 [ 107.238164][ T8271] total_unevictable 0 [ 107.242248][ T8271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.484,pid=4871,uid=0 [ 107.256912][ T8271] Memory cgroup out of memory: Killed process 4871 (syz.1.484) total-vm:95872kB, anon-rss:1144kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 107.356938][ T8268] syz.1.1545 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 107.367793][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.1.1545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.367830][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.367847][ T8268] Call Trace: [ 107.367855][ T8268] [ 107.367933][ T8268] __dump_stack+0x1d/0x30 [ 107.367964][ T8268] dump_stack_lvl+0xe8/0x140 [ 107.367992][ T8268] dump_stack+0x15/0x1b [ 107.368065][ T8268] dump_header+0x81/0x220 [ 107.368088][ T8268] oom_kill_process+0x342/0x400 [ 107.368194][ T8268] out_of_memory+0x979/0xb80 [ 107.368237][ T8268] try_charge_memcg+0x610/0xa10 [ 107.368360][ T8268] charge_memcg+0x51/0xc0 [ 107.368392][ T8268] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 107.368423][ T8268] __read_swap_cache_async+0x17b/0x2d0 [ 107.368457][ T8268] swap_cluster_readahead+0x262/0x3c0 [ 107.368506][ T8268] swapin_readahead+0xde/0x6f0 [ 107.368535][ T8268] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 107.368606][ T8268] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 107.368653][ T8268] ? __rcu_read_unlock+0x4f/0x70 [ 107.368691][ T8268] ? swap_cache_get_folio+0x277/0x280 [ 107.368759][ T8268] do_swap_page+0x2ae/0x2370 [ 107.368789][ T8268] ? __rb_insert_augmented+0x295/0x2c0 [ 107.368886][ T8268] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 107.368933][ T8268] ? enqueue_task_fair+0x35e/0x980 [ 107.368972][ T8268] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 107.369036][ T8268] ? __pfx_default_wake_function+0x10/0x10 [ 107.369072][ T8268] handle_mm_fault+0x9a5/0x2be0 [ 107.369109][ T8268] ? vma_start_read+0x141/0x1f0 [ 107.369148][ T8268] do_user_addr_fault+0x630/0x1080 [ 107.369259][ T8268] ? fpregs_restore_userregs+0xe2/0x1d0 [ 107.369304][ T8268] ? arch_exit_work+0x30/0x40 [ 107.369342][ T8268] exc_page_fault+0x62/0xa0 [ 107.369491][ T8268] asm_exc_page_fault+0x26/0x30 [ 107.369518][ T8268] RIP: 0033:0x7fe144698379 [ 107.369539][ T8268] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 107.369559][ T8268] RSP: 002b:00007ffebd73e250 EFLAGS: 00010212 [ 107.369618][ T8268] RAX: 00007fe144427828 RBX: 00007fe144427830 RCX: ffffffff817d563d [ 107.369642][ T8268] RDX: 0000000000000021 RSI: 00007fe144569920 RDI: 00007fe144427830 [ 107.369660][ T8268] RBP: 00007fe1443bab18 R08: 00007fe144492218 R09: 00007fe144a02000 [ 107.369678][ T8268] R10: 00007fe144227008 R11: 0000000000000002 R12: 00007fe1443bab10 [ 107.369696][ T8268] R13: 0000000000000021 R14: ffffffffffffffff R15: 00007fe144227008 [ 107.369719][ T8268] ? shmem_mapping+0xd/0x30 [ 107.369773][ T8268] [ 107.369781][ T8268] memory: usage 307200kB, limit 307200kB, failcnt 789 [ 107.527056][ T2968] IPVS: starting estimator thread 0... [ 107.530882][ T8268] memory+swap: usage 308120kB, limit 9007199254740988kB, failcnt 0 [ 107.550602][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 107.550621][ T29] audit: type=1326 audit(1762206135.795:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8417 comm="syz.5.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 107.569052][ T8268] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 107.569072][ T8268] Memory cgroup stats for /syz1: [ 107.595794][ T8268] cache 0 [ 107.599437][ T29] audit: type=1326 audit(1762206135.795:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8417 comm="syz.5.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 107.607817][ T8268] rss 0 [ 107.607828][ T8268] shmem 0 [ 107.607836][ T8268] mapped_file 0 [ 107.607845][ T8268] dirty 0 [ 107.607853][ T8268] writeback 0 [ 107.616027][ T29] audit: type=1326 audit(1762206135.795:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8417 comm="syz.5.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 107.620562][ T8268] workingset_refault_anon 655 [ 107.620572][ T8268] workingset_refault_file 533 [ 107.620579][ T8268] swap 946176 [ 107.620586][ T8268] swapcached 0 [ 107.620592][ T8268] pgpgin 141783 [ 107.674055][ T29] audit: type=1326 audit(1762206135.915:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8417 comm="syz.5.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 107.680971][ T8268] pgpgout 141783 [ 107.686057][ T8420] IPVS: using max 2352 ests per chain, 117600 per kthread [ 107.688965][ T8268] pgfault 103647 [ 107.809041][ T8268] pgmajfault 127 [ 107.812719][ T8268] inactive_anon 0 [ 107.816827][ T8268] active_anon 0 [ 107.820499][ T8268] inactive_file 0 [ 107.824157][ T8268] active_file 0 [ 107.827781][ T8268] unevictable 0 [ 107.831263][ T8268] hierarchical_memory_limit 314572800 [ 107.836717][ T8268] hierarchical_memsw_limit 9223372036854771712 [ 107.842950][ T8268] total_cache 0 [ 107.846432][ T8268] total_rss 0 [ 107.849716][ T8268] total_shmem 0 [ 107.853242][ T8268] total_mapped_file 0 [ 107.857239][ T8268] total_dirty 0 [ 107.860705][ T8268] total_writeback 0 [ 107.864714][ T8268] total_workingset_refault_anon 655 [ 107.870009][ T8268] total_workingset_refault_file 533 [ 107.875204][ T8268] total_swap 946176 [ 107.879021][ T8268] total_swapcached 0 [ 107.882929][ T8268] total_pgpgin 141783 [ 107.886935][ T8268] total_pgpgout 141783 [ 107.891000][ T8268] total_pgfault 103647 [ 107.895195][ T8268] total_pgmajfault 127 [ 107.899515][ T8268] total_inactive_anon 0 [ 107.903764][ T8268] total_active_anon 0 [ 107.907968][ T8268] total_inactive_file 0 [ 107.912142][ T8268] total_active_file 0 [ 107.916311][ T8268] total_unevictable 0 [ 107.920369][ T8268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1545,pid=8268,uid=0 [ 107.935064][ T8268] Memory cgroup out of memory: Killed process 8268 (syz.1.1545) total-vm:96136kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 108.167382][ T8271] syz.1.1545 (8271) used greatest stack depth: 6184 bytes left [ 108.177314][ T29] audit: type=1326 audit(1762206136.415:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.200882][ T29] audit: type=1326 audit(1762206136.415:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.224542][ T29] audit: type=1326 audit(1762206136.415:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.248413][ T29] audit: type=1326 audit(1762206136.415:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.272028][ T29] audit: type=1326 audit(1762206136.415:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.296281][ T29] audit: type=1326 audit(1762206136.415:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f496eaef6c9 code=0x7ffc0000 [ 108.765530][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 108.774683][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 108.798341][ T8457] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.482313][ T8484] tipc: Started in network mode [ 109.487501][ T8484] tipc: Node identity ac14140f, cluster identity 4711 [ 109.495258][ T8484] tipc: New replicast peer: 255.255.255.255 [ 109.501736][ T8484] tipc: Enabled bearer , priority 10 [ 109.900534][ T8513] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1584'. [ 109.910997][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 109.917960][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 109.924935][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 109.939590][ T8516] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 109.954273][ T8516] team0: Port device dummy0 added [ 109.960383][ T8516] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 109.968953][ T8516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.978679][ T8516] team0: Failed to send options change via netlink (err -105) [ 109.986705][ T8516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 110.006862][ T8516] team0: Port device dummy0 removed [ 110.090390][ T8516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.119823][ T8513] infiniband syz1: set down [ 110.124558][ T8513] infiniband syz1: added vcan0 [ 110.146562][ T1034] vcan0 speed is unknown, defaulting to 1000 [ 110.183166][ T8513] RDS/IB: syz1: added [ 110.204820][ T8529] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.215716][ T8513] smc: adding ib device syz1 with port count 1 [ 110.351312][ T8513] smc: ib device syz1 port 1 has no pnetid [ 110.357564][ T1034] vcan0 speed is unknown, defaulting to 1000 [ 110.364054][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 110.709347][ T10] tipc: Node number set to 2886997007 [ 110.775082][ T8541] bridge0: entered promiscuous mode [ 110.780829][ T8541] macsec0: entered promiscuous mode [ 110.787519][ T8541] bridge0: port 3(macsec0) entered blocking state [ 110.794073][ T8541] bridge0: port 3(macsec0) entered disabled state [ 110.800990][ T8541] macsec0: entered allmulticast mode [ 110.806414][ T8541] bridge0: entered allmulticast mode [ 110.813027][ T8541] macsec0: left allmulticast mode [ 110.818345][ T8541] bridge0: left allmulticast mode [ 110.824487][ T8541] bridge0: left promiscuous mode [ 110.832603][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 110.873197][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 110.919677][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 110.979523][ T8513] vcan0 speed is unknown, defaulting to 1000 [ 111.164793][ T8555] loop5: detected capacity change from 0 to 512 [ 111.172248][ T8555] EXT4-fs: Ignoring removed orlov option [ 111.182810][ T8555] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 111.193202][ T8555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 111.202442][ T8555] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1599: corrupted in-inode xattr: e_value size too large [ 111.223627][ T8555] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1599: couldn't read orphan inode 15 (err -117) [ 111.246048][ T8555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.146836][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.270907][ T8617] netlink: 'syz.5.1618': attribute type 16 has an invalid length. [ 112.279061][ T8617] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1618'. [ 112.631409][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 112.640406][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 113.963251][ T8662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 114.156830][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 114.156849][ T29] audit: type=1326 audit(1762206142.405:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.8.1634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbacb75f6c9 code=0x0 [ 114.622611][ T8682] vcan0 speed is unknown, defaulting to 1000 [ 115.036526][ T29] audit: type=1400 audit(1762206143.285:3556): avc: denied { relabelfrom } for pid=8684 comm="syz.1.1639" name="" dev="pipefs" ino=20550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.095192][ T8689] new mount options do not match the existing superblock, will be ignored [ 115.097249][ T29] audit: type=1326 audit(1762206143.335:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.127646][ T29] audit: type=1326 audit(1762206143.335:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.151316][ T29] audit: type=1326 audit(1762206143.335:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.175012][ T29] audit: type=1326 audit(1762206143.335:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.198646][ T29] audit: type=1326 audit(1762206143.335:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.222324][ T29] audit: type=1326 audit(1762206143.335:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.245986][ T29] audit: type=1326 audit(1762206143.335:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.369190][ T29] audit: type=1326 audit(1762206143.345:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1447bf6c9 code=0x7ffc0000 [ 115.477180][ T8705] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1645'. [ 115.488037][ T8705] rdma_rxe: rxe_newlink: failed to add vcan0 [ 115.553561][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 115.637805][ T8720] netlink: 'syz.5.1650': attribute type 10 has an invalid length. [ 115.645785][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1650'. [ 115.764166][ T8720] team0: Port device geneve1 added [ 115.831933][ T8714] vcan0 speed is unknown, defaulting to 1000 [ 115.959847][ T8729] veth8: entered promiscuous mode [ 115.964957][ T8729] veth8: entered allmulticast mode [ 116.771295][ T8740] vcan0 speed is unknown, defaulting to 1000 [ 117.011474][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1663'. [ 117.129508][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1663'. [ 117.550111][ T8784] veth8: entered promiscuous mode [ 117.555267][ T8784] veth8: entered allmulticast mode [ 117.571886][ T8786] loop5: detected capacity change from 0 to 512 [ 117.588986][ T8786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.615217][ T8786] EXT4-fs (loop5): resizing filesystem from 256 to 1 blocks [ 117.622720][ T8786] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 117.648304][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.724095][ T8799] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 118.714446][ T8823] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.963500][ T8828] vcan0 speed is unknown, defaulting to 1000 [ 118.980731][ T8830] veth2: entered promiscuous mode [ 118.985822][ T8830] veth2: entered allmulticast mode [ 118.994944][ T8833] netlink: 'syz.6.1684': attribute type 10 has an invalid length. [ 119.003134][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1684'. [ 119.030078][ T8833] team0: Port device geneve1 added [ 119.041723][ T4117] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.056387][ T4117] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.066622][ T4117] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.074903][ T4117] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.483277][ T8848] netlink: 'syz.1.1690': attribute type 16 has an invalid length. [ 119.491193][ T8848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1690'. [ 119.543735][ T8838] vcan0 speed is unknown, defaulting to 1000 [ 119.738607][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 119.738626][ T29] audit: type=1326 audit(1762206147.985:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.816439][ T29] audit: type=1326 audit(1762206147.985:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.840737][ T29] audit: type=1326 audit(1762206147.985:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.864513][ T29] audit: type=1326 audit(1762206147.985:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.887944][ T29] audit: type=1326 audit(1762206147.985:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.911477][ T29] audit: type=1326 audit(1762206147.985:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedafff6c9 code=0x7ffc0000 [ 119.934907][ T29] audit: type=1326 audit(1762206147.985:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcedb0015e7 code=0x7ffc0000 [ 119.958359][ T29] audit: type=1326 audit(1762206147.985:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcedb00155c code=0x7ffc0000 [ 119.981727][ T29] audit: type=1326 audit(1762206147.985:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcedb001494 code=0x7ffc0000 [ 120.005072][ T29] audit: type=1326 audit(1762206147.985:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcedb001494 code=0x7ffc0000 [ 120.359591][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 122.996929][ T8911] tipc: Enabling of bearer rejected, failed to enable media [ 123.016152][ T8913] geneve2: entered promiscuous mode [ 123.021579][ T8913] geneve2: entered allmulticast mode [ 123.372098][ T8933] tipc: Enabling of bearer rejected, failed to enable media [ 123.551205][ T8939] syzkaller0: entered promiscuous mode [ 123.556804][ T8939] syzkaller0: entered allmulticast mode [ 123.807035][ T8948] vcan0 speed is unknown, defaulting to 1000 [ 124.234945][ T8953] tipc: Enabling of bearer rejected, failed to enable media [ 124.376691][ T8957] tipc: Enabling of bearer rejected, failed to enable media [ 124.506005][ T8961] vcan0 speed is unknown, defaulting to 1000 [ 125.373416][ T8928] ================================================================== [ 125.381658][ T8928] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 125.388700][ T8928] [ 125.391042][ T8928] read-write to 0xffff8881221d67ec of 4 bytes by task 8927 on cpu 0: [ 125.399207][ T8928] fifo_open+0x17f/0x5d0 [ 125.403481][ T8928] do_dentry_open+0x649/0xa20 [ 125.408177][ T8928] vfs_open+0x37/0x1e0 [ 125.412458][ T8928] path_openat+0x1c5e/0x2170 [ 125.417074][ T8928] do_file_open_root+0x1d0/0x3f0 [ 125.422041][ T8928] file_open_root+0xfd/0x130 [ 125.426666][ T8928] do_handle_open+0x659/0x6e0 [ 125.431395][ T8928] __x64_sys_open_by_handle_at+0x44/0x50 [ 125.437089][ T8928] x64_sys_call+0x279f/0x3000 [ 125.441924][ T8928] do_syscall_64+0xd2/0x200 [ 125.446468][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.452406][ T8928] [ 125.454840][ T8928] read to 0xffff8881221d67ec of 4 bytes by task 8928 on cpu 1: [ 125.462493][ T8928] wait_for_partner+0xf7/0x1c0 [ 125.467311][ T8928] fifo_open+0x462/0x5d0 [ 125.471601][ T8928] do_dentry_open+0x649/0xa20 [ 125.476406][ T8928] vfs_open+0x37/0x1e0 [ 125.480505][ T8928] path_openat+0x1c5e/0x2170 [ 125.485171][ T8928] do_filp_open+0x109/0x230 [ 125.489804][ T8928] do_sys_openat2+0xa6/0x110 [ 125.494601][ T8928] __x64_sys_openat+0xf2/0x120 [ 125.499398][ T8928] x64_sys_call+0x2eab/0x3000 [ 125.504115][ T8928] do_syscall_64+0xd2/0x200 [ 125.508686][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.514617][ T8928] [ 125.516972][ T8928] value changed: 0x00000002 -> 0x00000001 [ 125.522755][ T8928] [ 125.525095][ T8928] Reported by Kernel Concurrency Sanitizer on: [ 125.531363][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.1.1714 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.541201][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.551292][ T8928] ==================================================================