last executing test programs: 6m4.123737069s ago: executing program 32 (id=2097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 4m55.379910611s ago: executing program 33 (id=4086): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 4m37.658939056s ago: executing program 34 (id=4667): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 4m36.506178695s ago: executing program 3 (id=4702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m36.256407728s ago: executing program 3 (id=4708): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 4m36.219751048s ago: executing program 3 (id=4709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000100), 0x3, 0x53c, &(0x7f0000000500)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 4m36.060771569s ago: executing program 3 (id=4711): unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) 4m35.328561855s ago: executing program 3 (id=4721): pipe2$watch_queue(0x0, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x44) 4m35.328433045s ago: executing program 35 (id=4721): pipe2$watch_queue(0x0, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x44) 4m35.226112096s ago: executing program 0 (id=4724): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m35.128723267s ago: executing program 0 (id=4725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x1) sync_file_range(r2, 0x7, 0x0, 0x6) 4m34.951656969s ago: executing program 0 (id=4726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000080), 0x0) 4m34.860400229s ago: executing program 0 (id=4727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000100), 0x3, 0x53c, &(0x7f0000000500)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 4m34.630053331s ago: executing program 0 (id=4728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x38, r3, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0xfffffffe}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x38}}, 0x0) 4m34.027610656s ago: executing program 0 (id=4742): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x1d) 4m33.939957917s ago: executing program 36 (id=4742): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x1d) 4m8.120044704s ago: executing program 5 (id=5486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 4m8.016689855s ago: executing program 5 (id=5490): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x1000, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r0, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x8000}, {0x0, 0x0, 0x800}], 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 4m7.40681561s ago: executing program 5 (id=5519): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m7.281747431s ago: executing program 5 (id=5522): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x9801) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 4m7.281062691s ago: executing program 5 (id=5523): unshare(0x400) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) write$tcp_congestion(r0, &(0x7f0000000340)='hybla\x00', 0xfffffee6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) fsync(0xffffffffffffffff) 4m4.105622326s ago: executing program 5 (id=5646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) 4m4.089985187s ago: executing program 37 (id=5646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) 3m54.243989006s ago: executing program 7 (id=5889): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) set_mempolicy(0x3, &(0x7f0000000040)=0x5bf, 0xd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000100)="c7", 0x1, 0x20008841, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 3m54.056523887s ago: executing program 7 (id=5895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m53.924613518s ago: executing program 7 (id=5900): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0xc1a3}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m53.873839349s ago: executing program 7 (id=5903): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x9801) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 3m53.79754692s ago: executing program 7 (id=5907): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) 3m53.533634161s ago: executing program 7 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m53.513292802s ago: executing program 38 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 57.868055204s ago: executing program 8 (id=10782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x68a}}]}}]}, 0x48}}, 0x44080) 57.830221965s ago: executing program 8 (id=10784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = io_uring_setup(0x1d7e, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xd, 0x0, 0x20) 57.791435345s ago: executing program 8 (id=10787): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180)=0x63, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000064fa9ef0abdc7fa20000000000250000000e0001006e5c14d63dba335a0b0000657464657673696d1e0000ab5302006e657464657673696d30000008008b003bb2bcd36fa625de72367b0701361f3d603ba4d5cb3b367200fc31cbdc24a814950d136935c2b911925108c17a64a8b67ad0763fc123c281845ba5af83eefb26e204ee06ede8c3", @ANYRES32, @ANYBLOB="6a9d2588930128f5b3ae35faea092ada74f2ed40cd2e76c42f6e6fc5b66a30fe21fd42de5f7dc8c05d62591d641e772aa9cec6a20b0d858e4a89ae0080ffffffffffffbcaa101aa21274098601ce1655bfcccbf94dee37361091dcf523a4400ed90d5d5a3ea751"], 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x400c0c4) 57.720427346s ago: executing program 8 (id=10789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 57.719958136s ago: executing program 8 (id=10791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@data_err_ignore}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 57.717819485s ago: executing program 8 (id=10793): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r3, 0x0, 0xb0) 42.684374586s ago: executing program 39 (id=10793): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r3, 0x0, 0xb0) 19.672499542s ago: executing program 9 (id=11554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r1, 0x0, 0x300}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 19.582082722s ago: executing program 9 (id=11559): r0 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1800, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 19.088564986s ago: executing program 9 (id=11581): dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 19.015407667s ago: executing program 9 (id=11585): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) socket$packet(0x11, 0x3, 0x300) 18.873942658s ago: executing program 9 (id=11590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@data_err_ignore}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 18.809405849s ago: executing program 9 (id=11592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000680)=ANY=[], 0x0) 3.60864063s ago: executing program 40 (id=11592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000680)=ANY=[], 0x0) 2.230627532s ago: executing program 2 (id=11791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2.074463963s ago: executing program 2 (id=11796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7e06}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88f7}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 2.001434154s ago: executing program 1 (id=11801): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f00000000c0), &(0x7f0000000080)) getgroups(0x2, &(0x7f0000000180)=[0x0, 0xee01]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r4, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) lchown(&(0x7f0000000040)='./file1\x00', r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000b40)={0x0, 0x2, 0x9, 0x6}) 579.102695ms ago: executing program 2 (id=11825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 537.170135ms ago: executing program 2 (id=11817): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) r1 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xbf94, 0x2, 0x2, 0x39b}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1}, 0x1c) listen(r2, 0x10008957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 255.072258ms ago: executing program 1 (id=11818): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2cc, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r4, 0x0, 0xe065) 254.777678ms ago: executing program 2 (id=11819): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x467ce670db5adc3c, 0xf, 0x3, 0x1, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x64, 0x0, 0x89, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x3e}, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000014c0)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x0, 0xa, {{0x42, 0x4, 0x3, 0x2, 0x108, 0x68, 0x0, 0xc, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x1, [{@remote, 0xbb}, {@empty, 0x8}, {@empty, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x4c, 0x84, 0x1, 0x5, [{@local, 0x6}, {@empty, 0x10}, {@multicast2, 0x8}, {@local, 0x9}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6b5513a7}, {@local, 0x1}, {@empty, 0xc81}, {@broadcast, 0xf81}]}, @ssrr={0x89, 0x17, 0x21, [@remote, @broadcast, @remote, @loopback, @local]}, @lsrr={0x83, 0x17, 0xbb, [@rand_addr=0x64010101, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0x2e, 0x2, [{0x1, 0x11, "d0bdb0c9680bdc7908f707cc2e4b8a"}, {0x5, 0x3, "ae"}, {0x0, 0xe, "f8276a3d439923f128ba7278"}, {0x6, 0x6, "8d4faa88"}]}, @generic={0x44, 0xe, "a95a938b531e4009678e3714"}, @timestamp={0x44, 0x8, 0x8c, 0x0, 0x5, [0xab8]}, @cipso={0x86, 0x12, 0x1, [{0x0, 0x8, "72990ad5dd2f"}, {0x5, 0x2}, {0x5, 0x2}]}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x1b, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 254.574037ms ago: executing program 4 (id=11820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) close(0x3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xf5d6, 0x200, 0x2, 0x80, r5}, 0x10) 192.045678ms ago: executing program 4 (id=11821): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3326bd70000000000005"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) socket$kcm(0xa, 0x2, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 883.92µs ago: executing program 6 (id=11822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=11833): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000040)={[{@minixdf}, {@norecovery}, {@init_itable}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@bh}]}, 0x1, 0x46f, &(0x7f0000000a00)="$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") socket$netlink(0x10, 0x3, 0x14) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000003c0)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}], 0x1, 0x400c404) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ac30bad0 code=0x7ffc0000 [ 368.766161][T29088] all: renamed from bridge_slave_0 [ 368.815350][T29093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9753'. [ 369.319560][T29133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9771'. [ 369.887623][T29143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9777'. [ 370.156053][T29172] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9787'. [ 370.566656][T29196] 9pnet_fd: Insufficient options for proto=fd [ 370.984998][T29200] 9pnet_fd: Insufficient options for proto=fd [ 371.013993][T29205] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9803'. [ 371.031869][T29206] +IAP: renamed from bond0 [ 371.038335][T29206] +IAP: entered promiscuous mode [ 373.163286][T29222] netlink: 'syz.9.9810': attribute type 1 has an invalid length. [ 373.171085][T29222] netlink: 'syz.9.9810': attribute type 2 has an invalid length. [ 373.179104][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9810'. [ 373.207500][T29226] netlink: 'syz.1.9815': attribute type 10 has an invalid length. [ 373.407230][T29235] 9pnet_fd: Insufficient options for proto=fd [ 373.443787][T29239] vlan0: entered allmulticast mode [ 373.449061][T29239] bridge_slave_0: entered allmulticast mode [ 373.468605][T29239] bridge_slave_0: left allmulticast mode [ 373.618388][T29265] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9833'. [ 373.704004][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 373.704022][ T30] audit: type=1400 audit(1741484438.498:36194): avc: denied { bind } for pid=29274 comm="syz.4.9840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.736292][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9839'. [ 373.956163][T29285] netlink: 'syz.1.9843': attribute type 7 has an invalid length. [ 373.964013][T29285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9843'. [ 374.023424][T29289] netlink: 'syz.1.9844': attribute type 13 has an invalid length. [ 374.056723][ T30] audit: type=1326 audit(1741484438.848:36195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.080459][ T30] audit: type=1326 audit(1741484438.848:36196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.107826][ T30] audit: type=1326 audit(1741484438.848:36197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.131605][ T30] audit: type=1326 audit(1741484438.848:36198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.155261][ T30] audit: type=1326 audit(1741484438.848:36199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.178885][ T30] audit: type=1326 audit(1741484438.898:36200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.202436][ T30] audit: type=1326 audit(1741484438.898:36201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.226270][ T30] audit: type=1326 audit(1741484438.898:36202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.249961][ T30] audit: type=1326 audit(1741484438.898:36203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29291 comm="syz.8.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f057f12d169 code=0x7ffc0000 [ 374.280847][T29297] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9847'. [ 374.289909][T29297] netem: unknown loss type 13 [ 374.294620][T29297] netem: change failed [ 374.348467][T29298] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 374.484015][T29320] Unknown options in mask 5 [ 374.531762][T29328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9862'. [ 374.540796][T29328] netem: unknown loss type 13 [ 374.545506][T29328] netem: change failed [ 374.569019][T29331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9864'. [ 374.580248][T29331] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.588435][T29331] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.596751][T29331] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.605050][T29331] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.614168][T29331] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.622568][T29331] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.631118][T29331] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.639685][T29331] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.728848][T29336] netlink: 'syz.8.9866': attribute type 13 has an invalid length. [ 374.910443][T29344] netlink: 'syz.9.9878': attribute type 13 has an invalid length. [ 375.390694][T29356] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 375.402986][T29366] netlink: 'syz.8.9876': attribute type 10 has an invalid length. [ 375.479528][T29367] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 375.487316][T29367] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 375.491427][T29371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9877'. [ 375.503388][T29371] netem: unknown loss type 13 [ 375.607324][T29387] netlink: 'syz.2.9899': attribute type 4 has an invalid length. [ 375.648709][T29393] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9885'. [ 375.670496][T29393] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.678730][T29393] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.686967][T29393] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.694347][T29389] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 375.695166][T29393] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.712855][T29393] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.721374][T29393] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.721598][T29395] netlink: 'syz.2.9899': attribute type 4 has an invalid length. [ 375.729751][T29393] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.745904][T29393] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.773925][T29398] Unknown options in mask 5 [ 375.901204][T29409] Unknown options in mask 5 [ 375.907948][T29411] $H: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 376.001422][T29415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9895'. [ 376.010504][T29415] netem: unknown loss type 13 [ 376.015260][T29415] netem: change failed [ 376.094920][T29425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.130854][T29425] bond0: (slave veth9): Enslaving as an active interface with a down link [ 376.145186][T29425] ip6erspan0: entered promiscuous mode [ 376.152932][T29425] bond0: (slave ip6erspan0): making interface the new active one [ 376.162196][T29425] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 376.296772][T29434] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 376.663720][ T3373] IPVS: starting estimator thread 0... [ 376.774121][T29454] IPVS: using max 2400 ests per chain, 120000 per kthread [ 376.789336][T29462] smc: net device bond0 applied user defined pnetid SYZ0 [ 376.801944][T29462] smc: net device bond0 erased user defined pnetid SYZ0 [ 376.933323][T29477] 9pnet_fd: Insufficient options for proto=fd [ 377.882897][T29520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29520 comm=syz.1.9945 [ 378.569230][T29536] Set syz1 is full, maxelem 65536 reached [ 379.531355][T29575] 9pnet_fd: p9_fd_create_tcp (29575): problem connecting socket to 127.0.0.1 [ 379.613172][T29580] pim6reg: entered allmulticast mode [ 379.635863][T29580] pim6reg: left allmulticast mode [ 379.778811][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 379.778829][ T30] audit: type=1326 audit(1741484444.568:36264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29590 comm="syz.9.9984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x0 [ 379.893660][T29601] __nla_validate_parse: 1 callbacks suppressed [ 379.893714][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9974'. [ 379.916471][T29595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9973'. [ 380.066275][T29589] Set syz1 is full, maxelem 65536 reached [ 380.133260][T15823] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 380.144212][T15823] CPU: 0 UID: 0 PID: 15823 Comm: syz-executor Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 380.144259][T15823] Tainted: [W]=WARN [ 380.144323][T15823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.144336][T15823] Call Trace: [ 380.144343][T15823] [ 380.144350][T15823] dump_stack_lvl+0xf2/0x150 [ 380.144383][T15823] dump_stack+0x15/0x1a [ 380.144408][T15823] dump_header+0x83/0x2d0 [ 380.144431][T15823] oom_kill_process+0x341/0x4c0 [ 380.144501][T15823] out_of_memory+0x9af/0xbe0 [ 380.144540][T15823] ? css_next_descendant_pre+0x11c/0x140 [ 380.144570][T15823] mem_cgroup_out_of_memory+0x13e/0x190 [ 380.144605][T15823] try_charge_memcg+0x508/0x7f0 [ 380.144686][T15823] charge_memcg+0x50/0xc0 [ 380.144714][T15823] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 380.144743][T15823] __read_swap_cache_async+0x236/0x480 [ 380.144771][T15823] swap_cluster_readahead+0x279/0x3f0 [ 380.144857][T15823] swapin_readahead+0xe4/0x6f0 [ 380.144889][T15823] ? swap_cache_get_folio+0x77/0x210 [ 380.144916][T15823] do_swap_page+0x31b/0x2550 [ 380.145007][T15823] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 380.145171][T15823] ? __rcu_read_lock+0x36/0x50 [ 380.145207][T15823] ? __pfx_default_wake_function+0x10/0x10 [ 380.145302][T15823] handle_mm_fault+0x8e4/0x2ac0 [ 380.145338][T15823] exc_page_fault+0x3b9/0x650 [ 380.145367][T15823] asm_exc_page_fault+0x26/0x30 [ 380.145468][T15823] RIP: 0033:0x7f057f15f9e5 [ 380.145486][T15823] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 380.145506][T15823] RSP: 002b:00007ffdb3a5cca8 EFLAGS: 00010246 [ 380.145524][T15823] RAX: 0000000000000000 RBX: 00000000000008f6 RCX: 00007f057f15f9e3 [ 380.145539][T15823] RDX: 00007ffdb3a5ccc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.145551][T15823] RBP: 00007ffdb3a5cd2c R08: 0000000005cb3022 R09: 0000000000000000 [ 380.145562][T15823] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 380.145643][T15823] R13: 00000000000927c0 R14: 000000000005cb47 R15: 00007ffdb3a5cd80 [ 380.145661][T15823] [ 380.145668][T15823] memory: usage 307200kB, limit 307200kB, failcnt 330 [ 380.363619][T15823] memory+swap: usage 53188kB, limit 9007199254740988kB, failcnt 0 [ 380.371456][T15823] kmem: usage 40184kB, limit 9007199254740988kB, failcnt 0 [ 380.378654][T15823] Memory cgroup stats for /syz8: [ 380.379156][T15823] cache 0 [ 380.387025][T15823] rss 28672 [ 380.390166][T15823] shmem 0 [ 380.393221][T15823] mapped_file 0 [ 380.396766][T15823] dirty 0 [ 380.399728][T15823] writeback 8192 [ 380.403286][T15823] workingset_refault_anon 69 [ 380.407887][T15823] workingset_refault_file 145 [ 380.412577][T15823] swap 282624 [ 380.415863][T15823] swapcached 32768 [ 380.419624][T15823] pgpgin 257196 [ 380.423097][T15823] pgpgout 257188 [ 380.426656][T15823] pgfault 289834 [ 380.430346][T15823] pgmajfault 36 [ 380.433816][T15823] inactive_anon 32768 [ 380.437844][T15823] active_anon 0 [ 380.441335][T15823] inactive_file 0 [ 380.444971][T15823] active_file 0 [ 380.448441][T15823] unevictable 0 [ 380.451921][T15823] hierarchical_memory_limit 314572800 [ 380.457281][T15823] hierarchical_memsw_limit 9223372036854771712 [ 380.463510][T15823] total_cache 0 [ 380.466974][T15823] total_rss 28672 [ 380.470658][T15823] total_shmem 0 [ 380.474106][T15823] total_mapped_file 0 [ 380.478137][T15823] total_dirty 0 [ 380.482165][T15823] total_writeback 8192 [ 380.486249][T15823] total_workingset_refault_anon 69 [ 380.491374][T15823] total_workingset_refault_file 145 [ 380.496672][T15823] total_swap 282624 [ 380.500642][T15823] total_swapcached 32768 [ 380.504893][T15823] total_pgpgin 257196 [ 380.508868][T15823] total_pgpgout 257188 [ 380.512983][T15823] total_pgfault 289834 [ 380.517041][T15823] total_pgmajfault 36 [ 380.521031][T15823] total_inactive_anon 32768 [ 380.525524][T15823] total_active_anon 0 [ 380.529539][T15823] total_inactive_file 0 [ 380.533724][T15823] total_active_file 0 [ 380.537721][T15823] total_unevictable 0 [ 380.541709][T15823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9970,pid=29584,uid=0 [ 380.556453][T15823] Memory cgroup out of memory: OOM victim 29584 (syz.8.9970) is already exiting. Skip killing the task [ 380.688328][T29616] 9pnet_fd: p9_fd_create_tcp (29616): problem connecting socket to 127.0.0.1 [ 381.442717][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9990'. [ 381.516994][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9991'. [ 381.771619][T29635] Set syz1 is full, maxelem 65536 reached [ 381.875939][ T30] audit: type=1326 audit(1741484446.668:36265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 381.902601][ T30] audit: type=1326 audit(1741484446.698:36266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 381.926347][ T30] audit: type=1326 audit(1741484446.698:36267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 381.950227][ T30] audit: type=1326 audit(1741484446.698:36268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 381.974059][ T30] audit: type=1326 audit(1741484446.698:36269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 381.997644][ T30] audit: type=1326 audit(1741484446.698:36270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 382.021412][ T30] audit: type=1326 audit(1741484446.698:36271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 382.045198][ T30] audit: type=1326 audit(1741484446.698:36272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 382.069191][ T30] audit: type=1326 audit(1741484446.698:36273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29660 comm="syz.1.10001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 382.095109][T29663] netlink: 12 bytes leftover after parsing attributes in process `#} [@'. [ 382.116116][T29667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10004'. [ 383.076799][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.084366][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.091847][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.125120][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.132576][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.140113][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.147570][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.155057][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.162528][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.169942][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.177358][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.184763][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.192167][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.199690][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.227249][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.234816][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.242252][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.249738][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.257275][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.264753][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.272167][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.279635][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.287039][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.294450][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.301980][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.309417][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.316853][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.324382][ T3373] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.339214][ T3373] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 383.457700][T29740] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10037'. [ 383.783269][T29768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10047'. [ 383.815667][T29770] validate_nla: 2 callbacks suppressed [ 383.815731][T29770] netlink: 'gtp': attribute type 7 has an invalid length. [ 383.828473][T29770] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 383.839537][T29768] bridge0: entered promiscuous mode [ 383.846174][T29768] bridge0: left promiscuous mode [ 384.523666][T29820] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10070'. [ 384.614908][T29832] netlink: 'syz.8.10069': attribute type 2 has an invalid length. [ 384.623017][T29832] netlink: 'syz.8.10069': attribute type 4 has an invalid length. [ 384.730382][T29839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29839 comm=syz.4.10077 [ 384.743318][T29839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29839 comm=syz.4.10077 [ 384.758761][T29839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29839 comm=syz.4.10077 [ 384.823625][T29850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=29850 comm=syz.4.10077 [ 384.991784][T29863] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 385.026273][T29865] __nla_validate_parse: 1 callbacks suppressed [ 385.026295][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10087'. [ 385.065175][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 385.065195][ T30] audit: type=1326 audit(1741484449.858:36389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.095483][ T30] audit: type=1326 audit(1741484449.858:36390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.096979][T29872] bridge0: entered allmulticast mode [ 385.119376][ T30] audit: type=1326 audit(1741484449.858:36391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119478][ T30] audit: type=1326 audit(1741484449.858:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119590][ T30] audit: type=1326 audit(1741484449.858:36393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119623][ T30] audit: type=1326 audit(1741484449.858:36394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119654][ T30] audit: type=1326 audit(1741484449.858:36395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119749][ T30] audit: type=1326 audit(1741484449.858:36396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.119781][ T30] audit: type=1326 audit(1741484449.858:36397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29866 comm="syz.1.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 385.664321][T29915] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.672734][T29915] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.680962][T29915] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.689256][T29915] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.699392][T29915] geneve2: entered promiscuous mode [ 385.704650][T29915] geneve2: entered allmulticast mode [ 385.716391][T29915] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.724904][T29915] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.733409][T29915] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.742020][T29915] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.834795][ T30] audit: type=1326 audit(1741484450.628:36398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29928 comm="syz.9.10112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 385.876712][T29927] tipc: Enabled bearer , priority 0 [ 387.412664][T30095] bond_slave_1: mtu less than device minimum [ 387.460580][T30103] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 387.896197][T30169] xt_CT: No such helper "pptp" [ 387.980649][T30183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10174'. [ 388.084592][T30196] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10176'. [ 388.350559][T30228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30228 comm=syz.9.10190 [ 388.467049][T30236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10193'. [ 388.791123][T30252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10200'. [ 388.836543][T30257] wg2: entered promiscuous mode [ 388.841637][T30257] wg2: entered allmulticast mode [ 388.900101][T30267] netlink: 'syz.8.10207': attribute type 4 has an invalid length. [ 389.697883][T30365] netlink: 'syz.8.10248': attribute type 4 has an invalid length. [ 390.004749][T30393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10259'. [ 390.039332][T30395] bridge: RTM_NEWNEIGH with invalid ether address [ 390.067546][T30399] netlink: 'syz.1.10262': attribute type 3 has an invalid length. [ 390.536189][T30443] tipc: Enabling of bearer rejected, failed to enable media [ 390.828556][T30490] netlink: '+}[@': attribute type 3 has an invalid length. [ 391.099284][ T30] kauditd_printk_skb: 342 callbacks suppressed [ 391.099300][ T30] audit: type=1326 audit(1741484455.888:36741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30519 comm="syz.9.10312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x0 [ 391.229633][T30536] xt_CT: No such helper "pptp" [ 391.528595][T30568] vlan0: entered allmulticast mode [ 391.533813][T30568] bridge_slave_0: entered allmulticast mode [ 391.540903][T30568] bridge_slave_0: left allmulticast mode [ 391.627717][T30582] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10332'. [ 391.891732][T30609] netlink: 312 bytes leftover after parsing attributes in process `syz.8.10348'. [ 392.012920][T30623] pimreg12: entered allmulticast mode [ 392.571711][ T30] audit: type=1400 audit(1741484457.368:36742): avc: denied { read } for pid=30667 comm="syz.2.10374" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 392.598182][ T30] audit: type=1400 audit(1741484457.388:36743): avc: denied { getopt } for pid=30667 comm="syz.2.10374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.618500][ T30] audit: type=1400 audit(1741484457.388:36744): avc: denied { ioctl } for pid=30667 comm="syz.2.10374" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 392.685686][ T30] audit: type=1326 audit(1741484457.478:36745): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30675 comm="syz.8.10377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f057f12d169 code=0x0 [ 392.839659][T30697] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 392.919161][ T30] audit: type=1400 audit(1741484457.698:36746): avc: denied { mount } for pid=30708 comm="syz.4.10391" name="/" dev="rpc_pipefs" ino=87626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 393.117435][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10395'. [ 393.942533][ T30] audit: type=1326 audit(1741484458.738:36747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30762 comm="syz.2.10415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 393.966306][ T30] audit: type=1326 audit(1741484458.738:36748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30762 comm="syz.2.10415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 393.991950][ T30] audit: type=1326 audit(1741484458.788:36749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30762 comm="syz.2.10415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f240e0a9359 code=0x7ffc0000 [ 394.015687][ T30] audit: type=1326 audit(1741484458.788:36750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30762 comm="syz.2.10415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 394.147631][T30780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10420'. [ 394.344959][T30793] netlink: 'syz.9.10426': attribute type 4 has an invalid length. [ 394.917220][T30837] vlan0: entered allmulticast mode [ 394.922424][T30837] bridge_slave_0: entered allmulticast mode [ 394.947880][T30837] bridge_slave_0: left allmulticast mode [ 395.195482][T30863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10455'. [ 395.337195][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10469'. [ 395.590732][T30918] netlink: 9 bytes leftover after parsing attributes in process `syz.8.10481'. [ 395.602266][T30918] gretap0: entered promiscuous mode [ 395.609021][T30918] netlink: 5 bytes leftover after parsing attributes in process `syz.8.10481'. [ 395.622580][T30918] 0XD: renamed from gretap0 [ 395.630469][T30918] 0XD: left promiscuous mode [ 395.635409][T30918] 0XD: entered allmulticast mode [ 395.642820][T30918] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 395.719226][T30924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10484'. [ 395.814055][T30935] netlink: 'syz.8.10489': attribute type 30 has an invalid length. [ 395.874210][T30948] 9pnet_fd: Insufficient options for proto=fd [ 395.955227][T30959] bridge: RTM_NEWNEIGH with invalid ether address [ 395.978030][T30961] netlink: 3 bytes leftover after parsing attributes in process `syz.8.10500'. [ 395.987373][T30961] 1X: renamed from 60X [ 395.996223][T30961] 1X: entered allmulticast mode [ 396.001605][T30961] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 396.054626][T30970] tmpfs: Bad value for 'mpol' [ 396.065166][T30972] pim6reg1: entered promiscuous mode [ 396.070668][T30972] pim6reg1: entered allmulticast mode [ 396.489544][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 396.489561][ T30] audit: type=1400 audit(1741484461.288:36938): avc: denied { read } for pid=31009 comm="syz.2.10521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.535615][ T30] audit: type=1326 audit(1741484461.328:36939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.563203][ T30] audit: type=1326 audit(1741484461.358:36940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.587252][ T30] audit: type=1326 audit(1741484461.358:36941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.611194][ T30] audit: type=1326 audit(1741484461.358:36942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.635075][ T30] audit: type=1326 audit(1741484461.358:36943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.659062][ T30] audit: type=1326 audit(1741484461.358:36944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.682764][ T30] audit: type=1326 audit(1741484461.358:36945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.706754][ T30] audit: type=1326 audit(1741484461.358:36946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.730462][ T30] audit: type=1326 audit(1741484461.358:36947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31011 comm="syz.2.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 396.798884][T31020] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10525'. [ 397.626894][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10546'. [ 397.778768][T31091] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10553'. [ 397.799301][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10553'. [ 397.880581][T31096] ip6gretap1: entered allmulticast mode [ 398.176095][T31126] ip6gretap1: entered allmulticast mode [ 398.318414][T31145] tmpfs: Unsupported parameter 'huge' [ 398.474726][T31164] ip6gretap1: entered allmulticast mode [ 398.673700][T31181] tmpfs: Unsupported parameter 'huge' [ 399.066458][T31227] blktrace: Concurrent blktraces are not allowed on loop17 [ 399.280679][T31252] tmpfs: Unsupported parameter 'huge' [ 399.308601][T31257] ip6gretap1: entered allmulticast mode [ 399.621962][T31302] tmpfs: Unsupported parameter 'huge' [ 400.196224][T31325] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.204577][T31325] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.212914][T31325] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.221183][T31325] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.235860][T31325] geneve2: entered promiscuous mode [ 400.241190][T31325] geneve2: entered allmulticast mode [ 400.247678][T31325] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.256164][T31325] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.264657][T31325] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.273088][T31325] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.551041][T31339] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.559405][T31339] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.567662][T31339] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.575931][T31339] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.584334][T31339] geneve2: entered promiscuous mode [ 400.589610][T31339] geneve2: entered allmulticast mode [ 400.598001][T31339] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.606539][T31339] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.615013][T31339] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.623467][T31339] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.835941][T31378] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.844289][T31378] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.852559][T31378] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.860816][T31378] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.869850][T31378] geneve2: entered promiscuous mode [ 400.875101][T31378] geneve2: entered allmulticast mode [ 400.881465][T31378] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.889917][T31378] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.898279][T31378] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.906840][T31378] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.419153][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10696'. [ 401.643631][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 401.643656][ T30] audit: type=1326 audit(1741484466.438:37396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.695741][ T30] audit: type=1326 audit(1741484466.478:37397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.719768][ T30] audit: type=1326 audit(1741484466.478:37398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.743578][ T30] audit: type=1326 audit(1741484466.478:37399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.767376][ T30] audit: type=1326 audit(1741484466.478:37400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.791179][ T30] audit: type=1326 audit(1741484466.478:37401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.815023][ T30] audit: type=1326 audit(1741484466.478:37402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.838745][ T30] audit: type=1326 audit(1741484466.478:37403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.862529][ T30] audit: type=1326 audit(1741484466.478:37404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.886250][ T30] audit: type=1326 audit(1741484466.478:37405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.2.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 401.972210][T31431] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.980528][T31431] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.988771][T31431] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.997040][T31431] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.005297][T31431] geneve2: entered promiscuous mode [ 402.010540][T31431] geneve2: entered allmulticast mode [ 402.017272][T31431] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.025812][T31431] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.034269][T31431] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.042816][T31431] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.090715][T31444] blktrace: Concurrent blktraces are not allowed on loop3 [ 403.215188][T31486] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.223498][T31486] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.231748][T31486] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.240100][T31486] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.251305][T31486] geneve2: entered promiscuous mode [ 403.256563][T31486] geneve2: entered allmulticast mode [ 403.262832][T31486] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.271398][T31486] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.279892][T31486] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.288359][T31486] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.143060][T31533] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.151364][T31533] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.159684][T31533] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.165466][T31535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10739'. [ 404.167896][T31533] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.185247][T31533] geneve2: entered promiscuous mode [ 404.190525][T31533] geneve2: entered allmulticast mode [ 404.196575][T31533] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.204983][T31533] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.213500][T31533] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.221857][T31533] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.347297][T31547] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.355743][T31547] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.364197][T31547] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.372483][T31547] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.381134][T31547] geneve2: entered promiscuous mode [ 404.386401][T31547] geneve2: entered allmulticast mode [ 404.393054][T31547] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.401522][T31547] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.409906][T31547] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.418320][T31547] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.583744][T31565] bond_slave_1: mtu less than device minimum [ 405.112648][T31602] all: renamed from bridge_slave_0 [ 405.191424][T31610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31610 comm=syz.9.10765 [ 405.731529][T31667] tipc: Enabling of bearer rejected, failed to enable media [ 405.784652][T31671] SELinux: policydb version 0 does not match my version range 15-34 [ 405.804675][T31671] SELinux: failed to load policy [ 406.645502][T31730] ip6gre2: entered allmulticast mode [ 406.655140][T31732] xt_ecn: cannot match TCP bits for non-tcp packets [ 407.087418][T31741] SELinux: failed to load policy [ 407.390827][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 407.390844][ T30] audit: type=1326 audit(1741484472.188:37619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.450192][ T30] audit: type=1326 audit(1741484472.228:37620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.473998][ T30] audit: type=1326 audit(1741484472.228:37621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.497888][ T30] audit: type=1326 audit(1741484472.228:37622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.521620][ T30] audit: type=1326 audit(1741484472.228:37623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.545423][ T30] audit: type=1326 audit(1741484472.228:37624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.569174][ T30] audit: type=1326 audit(1741484472.228:37625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.593163][ T30] audit: type=1326 audit(1741484472.228:37626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.616853][ T30] audit: type=1326 audit(1741484472.228:37627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.640681][ T30] audit: type=1326 audit(1741484472.228:37628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31750 comm="syz.2.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 407.699481][T31757] netlink: 'syz.2.10837': attribute type 10 has an invalid length. [ 407.707507][T31757] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10837'. [ 408.399681][T31812] Set syz1 is full, maxelem 65536 reached [ 408.477788][T31823] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10866'. [ 408.529940][T31828] vlan0: entered allmulticast mode [ 408.535180][T31828] bridge_slave_0: entered allmulticast mode [ 408.550474][T31828] bridge_slave_0: left allmulticast mode [ 408.634200][T31832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10870'. [ 408.994318][T31853] tipc: New replicast peer: 255.255.255.255 [ 409.000668][T31853] tipc: Enabled bearer , priority 10 [ 409.025027][T31856] netlink: 'syz.4.10881': attribute type 4 has an invalid length. [ 409.038624][T31856] netlink: 'syz.4.10881': attribute type 4 has an invalid length. [ 409.118012][T31864] netlink: 'syz.1.10885': attribute type 1 has an invalid length. [ 409.126085][T31864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10885'. [ 409.387792][T31880] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 409.665090][T31906] sit0: entered allmulticast mode [ 409.692800][T31906] sit0: entered promiscuous mode [ 409.792798][T31917] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 410.170717][T31943] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10918'. [ 410.198072][T31945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10919'. [ 410.471522][T31950] netlink: 'syz.1.10921': attribute type 7 has an invalid length. [ 410.479441][T31950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10921'. [ 410.623764][T31956] wireguard0: entered promiscuous mode [ 410.629510][T31956] wireguard0: entered allmulticast mode [ 410.761018][T31968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10926'. [ 410.795424][T31970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31970 comm=syz.1.10927 [ 410.808199][T31970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31970 comm=syz.1.10927 [ 410.972876][T31978] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.10931'. [ 410.999231][T31978] netlink: zone id is out of range [ 411.004390][T31978] netlink: zone id is out of range [ 411.030658][T31978] netlink: zone id is out of range [ 411.035846][T31978] netlink: zone id is out of range [ 411.062396][T31978] netlink: set zone limit has 8 unknown bytes [ 412.108024][T32005] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10940'. [ 412.136059][T19015] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 412.147158][T19015] CPU: 1 UID: 0 PID: 19015 Comm: syz-executor Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 412.147270][T19015] Tainted: [W]=WARN [ 412.147277][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 412.147290][T19015] Call Trace: [ 412.147297][T19015] [ 412.147306][T19015] dump_stack_lvl+0xf2/0x150 [ 412.147341][T19015] dump_stack+0x15/0x1a [ 412.147367][T19015] dump_header+0x83/0x2d0 [ 412.147387][T19015] oom_kill_process+0x341/0x4c0 [ 412.147472][T19015] out_of_memory+0x9af/0xbe0 [ 412.147569][T19015] ? css_next_descendant_pre+0x11c/0x140 [ 412.147593][T19015] mem_cgroup_out_of_memory+0x13e/0x190 [ 412.147626][T19015] try_charge_memcg+0x508/0x7f0 [ 412.147658][T19015] charge_memcg+0x50/0xc0 [ 412.147686][T19015] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 412.147744][T19015] __read_swap_cache_async+0x236/0x480 [ 412.147776][T19015] swap_cluster_readahead+0x381/0x3f0 [ 412.147807][T19015] swapin_readahead+0xe4/0x6f0 [ 412.147878][T19015] ? next_uptodate_folio+0x810/0x890 [ 412.147909][T19015] ? swap_cache_get_folio+0x77/0x210 [ 412.147937][T19015] do_swap_page+0x31b/0x2550 [ 412.148016][T19015] ? __list_del_entry_valid_or_report+0x66/0x130 [ 412.148056][T19015] ? __rcu_read_lock+0x36/0x50 [ 412.148082][T19015] ? __pfx_default_wake_function+0x10/0x10 [ 412.148128][T19015] handle_mm_fault+0x8e4/0x2ac0 [ 412.148180][T19015] exc_page_fault+0x3b9/0x650 [ 412.148231][T19015] asm_exc_page_fault+0x26/0x30 [ 412.148339][T19015] RIP: 0033:0x7f13936641b7 [ 412.148359][T19015] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 15 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 14 e7 00 48 01 d1 39 7c 24 [ 412.148380][T19015] RSP: 002b:00007ffc4d1a7b40 EFLAGS: 00010206 [ 412.148409][T19015] RAX: 0000001b30020000 RBX: 000000000000095f RCX: 0000000000064960 [ 412.148424][T19015] RDX: 0000000001881e37 RSI: 00007ffc4d1a7bd0 RDI: 0000000000000009 [ 412.148439][T19015] RBP: 00007ffc4d1a7b7c R08: 0000000005d7cfc3 R09: 7fffffffffffffff [ 412.148454][T19015] R10: 00007f13935fa038 R11: 0000000000000010 R12: 0000000000001388 [ 412.148469][T19015] R13: 00000000000927c0 R14: 0000000000064653 R15: 00007ffc4d1a7bd0 [ 412.148492][T19015] [ 412.148500][T19015] memory: usage 307200kB, limit 307200kB, failcnt 2650 [ 412.373425][T19015] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 412.381361][T19015] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 412.388729][T19015] Memory cgroup stats for /syz4: [ 412.390482][T19015] cache 0 [ 412.398389][T19015] rss 0 [ 412.401310][T19015] shmem 0 [ 412.404261][T19015] mapped_file 0 [ 412.407823][T19015] dirty 0 [ 412.410834][T19015] writeback 0 [ 412.414210][T19015] workingset_refault_anon 1921 [ 412.418984][T19015] workingset_refault_file 1866 [ 412.423807][T19015] swap 479232 [ 412.427099][T19015] swapcached 4096 [ 412.430858][T19015] pgpgin 420817 [ 412.434332][T19015] pgpgout 420815 [ 412.437885][T19015] pgfault 478286 [ 412.441522][T19015] pgmajfault 384 [ 412.445147][T19015] inactive_anon 4096 [ 412.449063][T19015] active_anon 0 [ 412.452608][T19015] inactive_file 0 [ 412.456249][T19015] active_file 4096 [ 412.460069][T19015] unevictable 0 [ 412.463548][T19015] hierarchical_memory_limit 314572800 [ 412.468931][T19015] hierarchical_memsw_limit 9223372036854771712 [ 412.475132][T19015] total_cache 0 [ 412.478596][T19015] total_rss 0 [ 412.481921][T19015] total_shmem 0 [ 412.485401][T19015] total_mapped_file 0 [ 412.489498][T19015] total_dirty 0 [ 412.493067][T19015] total_writeback 0 [ 412.496887][T19015] total_workingset_refault_anon 1921 [ 412.502290][T19015] total_workingset_refault_file 1866 [ 412.507673][T19015] total_swap 479232 [ 412.511516][T19015] total_swapcached 4096 [ 412.515723][T19015] total_pgpgin 420817 [ 412.519736][T19015] total_pgpgout 420815 [ 412.523822][T19015] total_pgfault 478287 [ 412.528008][T19015] total_pgmajfault 384 [ 412.532164][T19015] total_inactive_anon 4096 [ 412.536598][T19015] total_active_anon 0 [ 412.540620][T19015] total_inactive_file 0 [ 412.544790][T19015] total_active_file 4096 [ 412.549047][T19015] total_unevictable 0 [ 412.553089][T19015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10932,pid=31980,uid=0 [ 412.567942][T19015] Memory cgroup out of memory: Killed process 31980 (syz.4.10932) total-vm:95760kB, anon-rss:1044kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 412.627807][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 412.627825][ T30] audit: type=1326 audit(1741484477.418:37724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.657729][ T30] audit: type=1326 audit(1741484477.418:37725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.682203][ T30] audit: type=1326 audit(1741484477.418:37726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.706170][ T30] audit: type=1326 audit(1741484477.418:37727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.730060][ T30] audit: type=1326 audit(1741484477.418:37728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.753821][ T30] audit: type=1326 audit(1741484477.418:37729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.777521][ T30] audit: type=1326 audit(1741484477.418:37730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.801289][ T30] audit: type=1326 audit(1741484477.418:37731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.825012][ T30] audit: type=1326 audit(1741484477.418:37732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 412.848604][ T30] audit: type=1326 audit(1741484477.418:37733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.2.10942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 413.517350][T32049] bridge: RTM_NEWNEIGH with invalid ether address [ 413.889900][T32073] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10977'. [ 414.166120][T32086] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10971'. [ 414.445960][T32098] netlink: 'gtp': attribute type 7 has an invalid length. [ 414.453173][T32098] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 414.624843][T32107] netlink: 'syz.9.10982': attribute type 4 has an invalid length. [ 414.846536][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10990'. [ 415.714060][T32158] tipc: Enabling of bearer rejected, failed to enable media [ 415.745037][T32166] tipc: Enabling of bearer rejected, failed to enable media [ 416.050065][T32185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11015'. [ 416.732735][T32239] vlan1: entered allmulticast mode [ 416.737914][T32239] bridge_slave_0: entered allmulticast mode [ 416.744581][T32239] bridge_slave_0: left allmulticast mode [ 416.951260][T32255] vlan0: entered allmulticast mode [ 416.956444][T32255] bridge_slave_0: entered allmulticast mode [ 416.978314][T32255] bridge_slave_0: left allmulticast mode [ 417.174802][T32264] netem: change failed [ 417.238177][T32270] netlink: 'syz.1.11050': attribute type 1 has an invalid length. [ 417.294616][T32270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.422109][T32270] bond0: (slave veth37): Enslaving as an active interface with a down link [ 417.482467][T32270] ip6erspan0: entered promiscuous mode [ 417.511913][T32270] bond0: (slave ip6erspan0): making interface the new active one [ 417.540914][T32270] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 418.559197][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 418.559213][ T30] audit: type=1326 audit(1741484483.338:37835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.589704][ T30] audit: type=1326 audit(1741484483.348:37836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.613573][ T30] audit: type=1326 audit(1741484483.348:37837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.637417][ T30] audit: type=1326 audit(1741484483.348:37838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.661131][ T30] audit: type=1326 audit(1741484483.348:37839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.684949][ T30] audit: type=1326 audit(1741484483.348:37840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.708832][ T30] audit: type=1326 audit(1741484483.348:37841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.732794][ T30] audit: type=1326 audit(1741484483.348:37842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.756536][ T30] audit: type=1326 audit(1741484483.348:37843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.780272][ T30] audit: type=1326 audit(1741484483.348:37844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32315 comm="syz.1.11070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 418.910951][T32325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11072'. [ 419.209479][T32350] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11086'. [ 419.256216][T32350] 0XD: entered promiscuous mode [ 419.261868][T32355] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11086'. [ 419.279371][T32355] 1XD: renamed from 30XD [ 419.289838][T32355] 1XD: left promiscuous mode [ 419.294789][T32355] 1XD: entered allmulticast mode [ 419.309825][T32355] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 419.472402][T32370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11095'. [ 419.495603][T32372] bridge: RTM_NEWNEIGH with invalid ether address [ 419.512326][T32370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11095'. [ 419.617996][T32382] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11099'. [ 419.639308][T32382] 0X: renamed from caif0 [ 419.646708][T32382] 0X: entered allmulticast mode [ 419.652067][T32382] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 419.804753][T32406] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11110'. [ 420.011634][T32423] 9pnet_fd: Insufficient options for proto=fd [ 420.950158][T32456] netlink: 'syz.4.11127': attribute type 1 has an invalid length. [ 420.982981][T32456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.142445][T32456] bond0: (slave veth21): Enslaving as an active interface with a down link [ 421.188083][T32456] ip6erspan0: entered promiscuous mode [ 421.197524][T32456] bond0: (slave ip6erspan0): making interface the new active one [ 421.206861][T32456] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 421.233999][T32434] chnl_net:caif_netlink_parms(): no params data found [ 421.304389][T32434] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.311533][T32434] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.321129][T32434] bridge_slave_0: entered allmulticast mode [ 421.327903][T32434] bridge_slave_0: entered promiscuous mode [ 421.335388][T32434] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.342588][T32434] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.352012][T32434] bridge_slave_1: entered allmulticast mode [ 421.358623][T32434] bridge_slave_1: entered promiscuous mode [ 421.378802][T32477] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11132'. [ 421.390029][T32434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.403933][T32434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.435431][T32434] team0: Port device team_slave_0 added [ 421.443891][T32434] team0: Port device team_slave_1 added [ 421.469051][T32434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.476354][T32434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.502392][T32434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.515584][T32434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.522640][T32434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.548668][T32434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.585397][T32434] hsr_slave_0: entered promiscuous mode [ 421.591915][T32434] hsr_slave_1: entered promiscuous mode [ 421.611058][T32488] netlink: 'syz.1.11136': attribute type 2 has an invalid length. [ 421.618925][T32488] netlink: 'syz.1.11136': attribute type 4 has an invalid length. [ 421.626941][T32488] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11136'. [ 421.698372][T32496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32496 comm=syz.2.11139 [ 421.711328][T32496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=32496 comm=syz.2.11139 [ 421.725602][T32496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32496 comm=syz.2.11139 [ 421.777454][T32499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=32499 comm=syz.2.11139 [ 421.941170][T32434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.952914][T32434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.963778][T32434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.975429][T32434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.997761][T32434] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.004933][T32434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.007890][T32502] netlink: 'syz.9.11142': attribute type 1 has an invalid length. [ 422.012254][T32434] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.027117][T32434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.043678][T32502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.051933][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.060407][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.079802][T32502] bond3: (slave veth15): Enslaving as an active interface with a down link [ 422.104272][T32502] ip6erspan0: entered promiscuous mode [ 422.112788][T32502] bond3: (slave ip6erspan0): making interface the new active one [ 422.122302][T32502] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 422.149345][T32434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.170697][T32434] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.194006][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.201174][T10518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.213093][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.220226][T10518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.246681][T32434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.257321][T32434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.336472][T32434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.511026][T32434] veth0_vlan: entered promiscuous mode [ 422.520394][T32434] veth1_vlan: entered promiscuous mode [ 422.563743][T32434] veth0_macvtap: entered promiscuous mode [ 422.594230][T32434] veth1_macvtap: entered promiscuous mode [ 422.631734][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.642271][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.655069][T32434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.673644][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.684216][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.695096][T32434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.719812][T32434] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.728563][T32434] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.737346][T32434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.746524][T32434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.941991][T32573] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11174'. [ 423.449860][ T1054] IPVS: starting estimator thread 0... [ 423.537254][T32609] program syz.2.11179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.549425][T32607] IPVS: using max 2208 ests per chain, 110400 per kthread [ 423.677949][T32628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11186'. [ 423.780315][T32633] tipc: Enabled bearer , priority 0 [ 423.797348][T32631] tipc: Resetting bearer [ 423.812079][T32637] loop6: detected capacity change from 0 to 164 [ 423.824181][T32631] tipc: Disabling bearer [ 423.843237][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 423.843253][ T30] audit: type=1326 audit(1741484488.638:38162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 423.875727][T32637] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 423.893502][ T30] audit: type=1326 audit(1741484488.678:38163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 423.917146][ T30] audit: type=1326 audit(1741484488.678:38164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 423.940974][ T30] audit: type=1326 audit(1741484488.678:38165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 423.964590][ T30] audit: type=1326 audit(1741484488.678:38166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 423.988330][ T30] audit: type=1326 audit(1741484488.678:38167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 424.012067][ T30] audit: type=1326 audit(1741484488.678:38168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 424.036029][ T30] audit: type=1326 audit(1741484488.678:38169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 424.059805][ T30] audit: type=1326 audit(1741484488.678:38170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 424.083580][ T30] audit: type=1326 audit(1741484488.678:38171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.6.11190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e8e64d169 code=0x7ffc0000 [ 424.641146][T32669] bridge0: entered allmulticast mode [ 424.648246][T32667] loop6: detected capacity change from 0 to 512 [ 424.695523][T32667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.755493][T32667] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.980888][T32684] netlink: 'syz.4.11205': attribute type 10 has an invalid length. [ 424.988845][T32684] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11205'. [ 425.522101][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.569844][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.577325][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.584758][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.646023][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.653503][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.661044][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.668438][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.675882][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.683324][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.690768][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.698160][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.705632][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.713074][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.720511][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.732468][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.739940][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.747338][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.752673][T32701] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11214'. [ 425.754772][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.771410][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.779033][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.786497][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.793920][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.801384][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.808922][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.816347][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.823839][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.831340][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.838741][T24391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.846714][T24391] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 425.926222][T32711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11231'. [ 425.930393][T32707] loop6: detected capacity change from 0 to 2048 [ 426.029855][T32707] loop6: p1 < > p4 [ 426.038437][T32707] loop6: p4 size 8388608 extends beyond EOD, truncated [ 426.181587][T32724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11221'. [ 426.325587][T32738] vlan0: entered allmulticast mode [ 426.330879][T32738] bridge_slave_0: entered allmulticast mode [ 426.358074][T32738] bridge_slave_0: left allmulticast mode [ 426.386424][T32741] netlink: 'syz.6.11228': attribute type 4 has an invalid length. [ 426.421320][T32743] sit0: entered allmulticast mode [ 426.486867][T32743] sit0: entered promiscuous mode [ 426.524006][T32741] netlink: 'syz.6.11228': attribute type 4 has an invalid length. [ 426.843476][T32764] loop6: detected capacity change from 0 to 512 [ 426.852756][T32764] EXT4-fs (loop6): blocks per group (71) and clusters per group (20800) inconsistent [ 428.328289][ T323] syz.9.11250 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 428.339370][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.9.11250 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 428.339411][ T323] Tainted: [W]=WARN [ 428.339421][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 428.339436][ T323] Call Trace: [ 428.339442][ T323] [ 428.339450][ T323] dump_stack_lvl+0xf2/0x150 [ 428.339542][ T323] dump_stack+0x15/0x1a [ 428.339586][ T323] dump_header+0x83/0x2d0 [ 428.339617][ T323] oom_kill_process+0x341/0x4c0 [ 428.339654][ T323] out_of_memory+0x9af/0xbe0 [ 428.339695][ T323] ? css_next_descendant_pre+0x11c/0x140 [ 428.339723][ T323] mem_cgroup_out_of_memory+0x13e/0x190 [ 428.339840][ T323] try_charge_memcg+0x508/0x7f0 [ 428.339871][ T323] charge_memcg+0x50/0xc0 [ 428.339900][ T323] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 428.339943][ T323] __read_swap_cache_async+0x236/0x480 [ 428.339995][ T323] swap_cluster_readahead+0x381/0x3f0 [ 428.340034][ T323] swapin_readahead+0xe4/0x6f0 [ 428.340066][ T323] ? __rcu_read_unlock+0x34/0x70 [ 428.340096][ T323] ? swap_cache_get_folio+0x77/0x210 [ 428.340184][ T323] do_swap_page+0x31b/0x2550 [ 428.340221][ T323] ? __rcu_read_lock+0x36/0x50 [ 428.340242][ T323] ? __pfx_default_wake_function+0x10/0x10 [ 428.340279][ T323] handle_mm_fault+0x8e4/0x2ac0 [ 428.340359][ T323] exc_page_fault+0x3b9/0x650 [ 428.340387][ T323] asm_exc_page_fault+0x26/0x30 [ 428.340413][ T323] RIP: 0033:0x7f1b96a73bb9 [ 428.340451][ T323] Code: 34 00 00 0f 8e 09 fe ff ff e8 f3 a6 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 80 7b 20 [ 428.340469][ T323] RSP: 002b:00007ffc53fbefe0 EFLAGS: 00010206 [ 428.340484][ T323] RAX: 000000000006891c RBX: 00007f1b96db5fa0 RCX: 00000000000687e0 [ 428.340497][ T323] RDX: 000000000000013c RSI: 00007ffc53fbefc0 RDI: 00000000000003e8 [ 428.340512][ T323] RBP: 00007f1b96db7ba0 R08: 0000000012dc5cca R09: 7fffffffffffffff [ 428.340527][ T323] R10: 00007f1b96a0a038 R11: 0000000000000010 R12: 0000000000068ac8 [ 428.340542][ T323] R13: 00007f1b96db6080 R14: ffffffffffffffff R15: 00007ffc53fbf0f0 [ 428.340564][ T323] [ 428.340614][ T323] memory: usage 307200kB, limit 307200kB, failcnt 298 [ 428.558318][ T323] memory+swap: usage 32204kB, limit 9007199254740988kB, failcnt 0 [ 428.566187][ T323] kmem: usage 17628kB, limit 9007199254740988kB, failcnt 0 [ 428.573400][ T323] Memory cgroup stats for /syz9: [ 428.573855][ T323] cache 0 [ 428.581817][ T323] rss 4096 [ 428.584996][ T323] shmem 0 [ 428.587926][ T323] mapped_file 0 [ 428.591437][ T323] dirty 0 [ 428.594376][ T323] writeback 0 [ 428.597655][ T323] workingset_refault_anon 97 [ 428.602267][ T323] workingset_refault_file 117 [ 428.606967][ T323] swap 618496 [ 428.610301][ T323] swapcached 4096 [ 428.613983][ T323] pgpgin 348514 [ 428.617520][ T323] pgpgout 348513 [ 428.621144][ T323] pgfault 395037 [ 428.624683][ T323] pgmajfault 46 [ 428.628192][ T323] inactive_anon 0 [ 428.631855][ T323] active_anon 0 [ 428.635374][ T323] inactive_file 0 [ 428.639064][ T323] active_file 0 [ 428.642606][ T323] unevictable 0 [ 428.646057][ T323] hierarchical_memory_limit 314572800 [ 428.651434][ T323] hierarchical_memsw_limit 9223372036854771712 [ 428.657700][ T323] total_cache 0 [ 428.661387][ T323] total_rss 4096 [ 428.664955][ T323] total_shmem 0 [ 428.668493][ T323] total_mapped_file 0 [ 428.672544][ T323] total_dirty 0 [ 428.675998][ T323] total_writeback 0 [ 428.679839][ T323] total_workingset_refault_anon 97 [ 428.684956][ T323] total_workingset_refault_file 117 [ 428.690201][ T323] total_swap 618496 [ 428.694015][ T323] total_swapcached 4096 [ 428.698162][ T323] total_pgpgin 348514 [ 428.702160][ T323] total_pgpgout 348513 [ 428.706283][ T323] total_pgfault 395037 [ 428.710367][ T323] total_pgmajfault 46 [ 428.714341][ T323] total_inactive_anon 0 [ 428.718513][ T323] total_active_anon 0 [ 428.722531][ T323] total_inactive_file 0 [ 428.726687][ T323] total_active_file 0 [ 428.730672][ T323] total_unevictable 0 [ 428.734704][ T323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.11250,pid=323,uid=0 [ 428.749558][ T323] Memory cgroup out of memory: Killed process 323 (syz.9.11250) total-vm:95760kB, anon-rss:916kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 429.054446][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 429.054463][ T30] audit: type=1326 audit(1741484493.848:38441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.091652][ T361] tipc: Started in network mode [ 429.096577][ T361] tipc: Node identity 36e89c60cebb, cluster identity 4711 [ 429.103885][ T361] tipc: Enabled bearer , priority 0 [ 429.109184][ T30] audit: type=1326 audit(1741484493.848:38442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.134196][ T30] audit: type=1326 audit(1741484493.878:38443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.157711][ T30] audit: type=1326 audit(1741484493.878:38444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.181540][ T30] audit: type=1326 audit(1741484493.878:38445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.205327][ T30] audit: type=1326 audit(1741484493.888:38446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.228806][ T30] audit: type=1326 audit(1741484493.888:38447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.252380][ T30] audit: type=1326 audit(1741484493.888:38448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.276259][ T355] tipc: Resetting bearer [ 429.276705][ T30] audit: type=1326 audit(1741484493.928:38449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.305522][ T30] audit: type=1326 audit(1741484493.928:38450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.9.11261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 429.347036][ T355] tipc: Disabling bearer [ 429.356623][ T365] tipc: Enabled bearer , priority 0 [ 429.516810][ T383] tipc: Enabling of bearer rejected, failed to enable media [ 430.460229][ T410] tipc: Enabling of bearer rejected, failed to enable media [ 430.471875][ T407] loop6: detected capacity change from 0 to 2048 [ 430.481769][ T407] EXT4-fs: Ignoring removed bh option [ 430.502145][ T407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.692032][ T420] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 430.707589][ T420] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 430.719944][ T420] EXT4-fs (loop6): This should not happen!! Data will be lost [ 430.719944][ T420] [ 430.729619][ T420] EXT4-fs (loop6): Total free blocks count 0 [ 430.735617][ T420] EXT4-fs (loop6): Free/Dirty block details [ 430.741858][ T420] EXT4-fs (loop6): free_blocks=2415919104 [ 430.747671][ T420] EXT4-fs (loop6): dirty_blocks=8224 [ 430.753062][ T420] EXT4-fs (loop6): Block reservation details [ 430.759143][ T420] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 430.795022][T10504] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 430.877460][ T432] tipc: Enabling of bearer rejected, failed to enable media [ 431.011967][ T452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11293'. [ 431.026591][ T455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11297'. [ 431.027688][ T456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11294'. [ 431.094211][ T466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11312'. [ 431.424561][ T490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=490 comm=syz.1.11315 [ 432.067412][ T515] loop6: detected capacity change from 0 to 512 [ 432.074409][ T515] EXT4-fs: Ignoring removed oldalloc option [ 432.081072][ T515] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 432.092294][ T515] EXT4-fs (loop6): 1 truncate cleaned up [ 432.098436][ T515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.159197][ T515] loop6: detected capacity change from 512 to 64 [ 432.175062][T32434] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 432.192003][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.533858][ T546] loop6: detected capacity change from 0 to 512 [ 432.553509][ T546] EXT4-fs: Ignoring removed oldalloc option [ 432.573548][ T546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 432.620160][ T546] EXT4-fs (loop6): 1 truncate cleaned up [ 432.635265][ T546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.680130][ T546] loop6: detected capacity change from 512 to 64 [ 432.786008][T32434] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 432.812081][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.454919][ T601] netlink: 25 bytes leftover after parsing attributes in process `syz.4.11354'. [ 433.536654][ T615] tipc: Enabling of bearer rejected, failed to enable media [ 433.567530][ T617] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 433.650889][ T622] 1XD: left allmulticast mode [ 433.679362][ T622] sit0: left promiscuous mode [ 433.684105][ T622] sit0: left allmulticast mode [ 433.823599][ T622] ip6gretap1: left allmulticast mode [ 433.835457][ T622] ip6gre2: left allmulticast mode [ 433.914782][ T647] loop6: detected capacity change from 0 to 512 [ 433.925826][ T647] EXT4-fs (loop6): first meta block group too large: 127 (group descriptor block count 1) [ 433.937080][ T622] ip6erspan0: left promiscuous mode [ 434.014636][ T653] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 434.093284][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 434.093301][ T30] audit: type=1326 audit(1741484498.888:38802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.125266][ T30] audit: type=1326 audit(1741484498.928:38803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.148912][ T30] audit: type=1326 audit(1741484498.928:38804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.172513][ T30] audit: type=1326 audit(1741484498.928:38805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.203214][ T30] audit: type=1326 audit(1741484498.928:38806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.226808][ T30] audit: type=1326 audit(1741484498.998:38807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 434.250529][ T30] audit: type=1326 audit(1741484498.998:38808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 434.274230][ T30] audit: type=1326 audit(1741484498.998:38809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b96b39359 code=0x7ffc0000 [ 434.297713][ T30] audit: type=1326 audit(1741484498.998:38810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 434.321355][ T30] audit: type=1326 audit(1741484498.998:38811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.9.11378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b96b39359 code=0x7ffc0000 [ 434.445820][ T682] 0X: left allmulticast mode [ 434.516932][ T682] ip6erspan0: left promiscuous mode [ 434.677955][ T702] loop6: detected capacity change from 0 to 2048 [ 434.693459][ T702] EXT4-fs: Ignoring removed bh option [ 434.712531][ T702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.051182][ T717] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 435.071945][ T720] vlan0: entered allmulticast mode [ 435.077103][ T720] bridge_slave_0: entered allmulticast mode [ 435.087722][ T720] bridge_slave_0: left allmulticast mode [ 435.099207][ T717] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 435.111552][ T717] EXT4-fs (loop6): This should not happen!! Data will be lost [ 435.111552][ T717] [ 435.121237][ T717] EXT4-fs (loop6): Total free blocks count 0 [ 435.127270][ T717] EXT4-fs (loop6): Free/Dirty block details [ 435.133243][ T717] EXT4-fs (loop6): free_blocks=2415919104 [ 435.138981][ T717] EXT4-fs (loop6): dirty_blocks=8224 [ 435.144399][ T717] EXT4-fs (loop6): Block reservation details [ 435.150476][ T717] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 435.231783][T10518] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 436.189480][ T814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11421'. [ 438.680604][ T934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=934 comm=syz.1.11449 [ 439.102134][ T30] kauditd_printk_skb: 622 callbacks suppressed [ 439.102153][ T30] audit: type=1326 audit(1741484503.898:39434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 439.131758][ T30] audit: type=1326 audit(1741484503.898:39435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b96b39359 code=0x7ffc0000 [ 439.155450][ T30] audit: type=1326 audit(1741484503.898:39436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 439.178977][ T30] audit: type=1326 audit(1741484503.898:39437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 439.202409][ T30] audit: type=1326 audit(1741484503.898:39438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b96b39359 code=0x7ffc0000 [ 439.225949][ T30] audit: type=1326 audit(1741484503.898:39439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 439.249574][ T30] audit: type=1326 audit(1741484503.898:39440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 439.272976][ T30] audit: type=1326 audit(1741484503.898:39441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b96b39359 code=0x7ffc0000 [ 439.296446][ T30] audit: type=1326 audit(1741484503.898:39442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1b96b9d169 code=0x7ffc0000 [ 439.320070][ T30] audit: type=1326 audit(1741484503.938:39443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.9.11444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b96b94127 code=0x7ffc0000 [ 439.783487][ T965] loop6: detected capacity change from 0 to 8192 [ 439.795571][ T965] vfat: Unknown parameter '' [ 440.406166][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.413433][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.466189][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.491162][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.547212][ T1069] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.556434][ T1069] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.561788][ T1096] netlink: 9 bytes leftover after parsing attributes in process `syz.9.11465'. [ 440.565607][ T1069] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.583276][ T1069] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.603844][ T1096] gretap0: entered promiscuous mode [ 440.613037][ T1089] netlink: 5 bytes leftover after parsing attributes in process `syz.9.11465'. [ 440.633836][ T1089] 0XD: renamed from gretap0 [ 440.654436][ T1089] 0XD: left promiscuous mode [ 440.659478][ T1089] 0XD: entered allmulticast mode [ 440.734256][ T1089] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 441.282619][ T1148] SELinux: syz.2.11478 (1148) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.378145][ T1155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11481'. [ 441.493692][ T1172] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 441.617292][ T1184] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11495'. [ 441.636145][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11496'. [ 441.655612][ T1184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1184 comm=syz.9.11495 [ 441.683740][ T1189] bond0: (slave veth9): Releasing active interface [ 441.690537][ T1189] bond0: (slave veth9): the permanent HWaddr of slave - 4a:3d:7e:d9:3f:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 441.717986][ T1189] bond0: (slave ip6erspan0): Releasing active interface [ 441.733161][ T1195] team0: Mode changed to "activebackup" [ 441.774713][ T1203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11502'. [ 442.344343][ T1242] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11518'. [ 443.475419][ T1316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11546'. [ 443.496372][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11547'. [ 443.507437][ T1316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1316 comm=syz.6.11546 [ 443.544223][ T1318] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11547'. [ 443.613402][ T1327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11550'. [ 443.741307][ T1337] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11553'. [ 444.043428][ T1373] ipt_ECN: cannot use operation on non-tcp rule [ 444.256429][ T30] kauditd_printk_skb: 528 callbacks suppressed [ 444.256448][ T30] audit: type=1400 audit(1741484509.048:39972): avc: denied { shutdown } for pid=1398 comm="syz.4.11579" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 444.592529][ T1428] loop6: detected capacity change from 0 to 512 [ 444.599384][ T1428] EXT4-fs: dax option not supported [ 444.866833][ T1442] netlink: 'syz.2.11599': attribute type 1 has an invalid length. [ 444.882299][ T1442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.898616][ T1442] bond4: (slave gretap1): making interface the new active one [ 444.960594][ T1442] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 444.975060][ T1444] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 445.015004][ T1447] netlink: 'syz.4.11600': attribute type 1 has an invalid length. [ 445.024611][ T1438] loop6: detected capacity change from 0 to 256 [ 445.045022][ T1438] FAT-fs (loop6): Directory bread(block 64) failed [ 445.055642][ T1438] FAT-fs (loop6): Directory bread(block 65) failed [ 445.058315][ T1449] vlan0: entered allmulticast mode [ 445.067368][ T1449] bridge_slave_0: entered allmulticast mode [ 445.074313][ T1449] bridge_slave_0: left allmulticast mode [ 445.088675][ T1438] FAT-fs (loop6): Directory bread(block 66) failed [ 445.098917][ T1438] FAT-fs (loop6): Directory bread(block 67) failed [ 445.105955][ T1438] FAT-fs (loop6): Directory bread(block 68) failed [ 445.114156][ T1438] FAT-fs (loop6): Directory bread(block 69) failed [ 445.120819][ T1438] FAT-fs (loop6): Directory bread(block 70) failed [ 445.152942][ T1438] FAT-fs (loop6): Directory bread(block 71) failed [ 445.168145][ T1438] FAT-fs (loop6): Directory bread(block 72) failed [ 445.175715][ T1438] FAT-fs (loop6): Directory bread(block 73) failed [ 445.209021][ T1438] syz.6.11597: attempt to access beyond end of device [ 445.209021][ T1438] loop6: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 445.482662][ T1481] 0XD: renamed from gretap0 [ 445.491694][ T1481] 0XD: entered allmulticast mode [ 445.749821][ T30] audit: type=1326 audit(1741484510.548:39973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.800987][ T30] audit: type=1326 audit(1741484510.568:39974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.824762][ T30] audit: type=1326 audit(1741484510.568:39975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.848426][ T30] audit: type=1326 audit(1741484510.568:39976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.872212][ T30] audit: type=1326 audit(1741484510.568:39977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.895826][ T30] audit: type=1326 audit(1741484510.568:39978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.919598][ T30] audit: type=1326 audit(1741484510.568:39979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.943192][ T30] audit: type=1326 audit(1741484510.568:39980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 445.966887][ T30] audit: type=1326 audit(1741484510.568:39981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.11628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 446.139411][ T1532] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 446.571137][ T1563] netlink: 'syz.2.11646': attribute type 13 has an invalid length. [ 446.769619][ T1581] vlan0: entered allmulticast mode [ 446.779380][ T1581] +IAP: entered allmulticast mode [ 446.793704][ T1581] +IAP: left allmulticast mode [ 446.825972][ T1587] veth0_to_bond: entered promiscuous mode [ 446.832524][ T1587] __nla_validate_parse: 6 callbacks suppressed [ 446.832542][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11653'. [ 446.881934][ T1587] veth0_to_bond (unregistering): left promiscuous mode [ 447.003873][ T1605] syzkaller0: entered allmulticast mode [ 447.294991][ T1631] sch_tbf: burst 7164 is lower than device lo mtu (11337746) ! [ 447.803708][ T1667] loop6: detected capacity change from 0 to 164 [ 447.830158][ T1667] syz.6.11670: attempt to access beyond end of device [ 447.830158][ T1667] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 447.866169][ T1667] syz.6.11670: attempt to access beyond end of device [ 447.866169][ T1667] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 448.371648][ T1687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11678'. [ 448.386277][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11677'. [ 448.399768][ T1689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.522550][ T1703] loop6: detected capacity change from 0 to 1024 [ 448.553664][ T1706] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11684'. [ 448.565722][ T1701] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11684'. [ 448.578602][ T1703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.726129][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.882777][ T1735] loop6: detected capacity change from 0 to 512 [ 448.897556][ T1735] msdos: Unknown parameter 'dots7' [ 449.093715][ T1733] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.102130][ T1733] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.110610][ T1733] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.118931][ T1733] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.129276][ T1733] geneve2: entered promiscuous mode [ 449.134553][ T1733] geneve2: entered allmulticast mode [ 449.293250][ T30] kauditd_printk_skb: 428 callbacks suppressed [ 449.293268][ T30] audit: type=1400 audit(1741484514.088:40410): avc: denied { mount } for pid=1762 comm="syz.2.11708" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 449.355853][ T30] audit: type=1326 audit(1741484514.148:40411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1754 comm="syz.1.11706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 449.380455][ T30] audit: type=1326 audit(1741484514.148:40412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1754 comm="syz.1.11706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 449.404793][ T30] audit: type=1326 audit(1741484514.148:40413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz.1.11706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ac33fa25 code=0x7ffc0000 [ 449.453367][ T30] audit: type=1400 audit(1741484514.208:40414): avc: denied { unmount } for pid=18157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 449.473641][ T30] audit: type=1400 audit(1741484514.248:40415): avc: denied { accept } for pid=1767 comm="syz.2.11710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.515173][ T30] audit: type=1326 audit(1741484514.298:40416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz.1.11706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f44ac30d169 code=0x7ffc0000 [ 449.598263][ T30] audit: type=1326 audit(1741484514.388:40417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.2.11712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 449.629802][ T30] audit: type=1326 audit(1741484514.428:40418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.2.11712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 449.653502][ T30] audit: type=1326 audit(1741484514.428:40419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.2.11712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240e10d169 code=0x7ffc0000 [ 449.744719][ T1781] netlink: 'syz.1.11716': attribute type 1 has an invalid length. [ 449.755292][ T1783] loop6: detected capacity change from 0 to 128 [ 449.777659][ T1781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.801180][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.801180][ T1783] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 449.821814][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.821814][ T1783] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 449.836067][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.836067][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 449.849495][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.849495][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 449.862929][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.862929][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 449.876430][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.876430][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 449.906862][ T1783] syz.6.11714: attempt to access beyond end of device [ 449.906862][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 449.921069][ T1781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.939911][ T1781] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 449.971724][ T1781] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 450.211493][ T1783] bio_check_eod: 4137 callbacks suppressed [ 450.211514][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.211514][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.378941][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.378941][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.402646][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.402646][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.416195][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.416195][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.429499][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.429499][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.443009][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.443009][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.456292][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.456292][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.469622][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.469622][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.482912][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.482912][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.496264][ T1783] syz.6.11714: attempt to access beyond end of device [ 450.496264][ T1783] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 450.802315][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11726'. [ 450.888817][ T1810] xt_CT: No such helper "pptp" [ 451.421945][ T1852] loop6: detected capacity change from 0 to 512 [ 451.439875][ T1852] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 451.490023][ T1852] EXT4-fs (loop6): 1 truncate cleaned up [ 451.502641][ T1852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.548286][ T1852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.331700][ T1907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1907 comm=syz.1.11761 [ 452.360230][ T1907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1907 comm=syz.1.11761 [ 453.057607][ T1930] loop6: detected capacity change from 0 to 2048 [ 453.092881][ T1930] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.11779: bad orphan inode 8192 [ 453.117445][ T1930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.212158][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.223835][T10535] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.281137][T10535] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.362174][T10535] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.430658][T10535] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.506186][T10535] bridge_slave_1: left allmulticast mode [ 459.511975][T10535] bridge_slave_1: left promiscuous mode [ 459.517618][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.526955][T10535] bridge_slave_0: left allmulticast mode [ 459.532654][T10535] bridge_slave_0: left promiscuous mode [ 459.538373][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.843299][T10535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.854608][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 459.854626][ T30] audit: type=1400 audit(1741484524.658:40516): avc: denied { ioctl } for pid=1943 comm="syz.2.11771" path="socket:[99944]" dev="sockfs" ino=99944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.886182][ T30] audit: type=1400 audit(1741484524.668:40517): avc: denied { mounton } for pid=1947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 459.910605][T10535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.922061][T10535] bond0 (unregistering): Released all slaves [ 459.930676][ T30] audit: type=1400 audit(1741484524.728:40518): avc: denied { create } for pid=1952 comm="syz.1.11773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.988777][ T1959] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11775'. [ 460.000815][ T1959] gretap0: entered promiscuous mode [ 460.010730][T10535] tipc: Disabling bearer [ 460.015731][T10535] tipc: Left network mode [ 460.017816][ T1959] netlink: 5 bytes leftover after parsing attributes in process `syz.6.11775'. [ 460.036397][ T1959] 0XD: renamed from gretap0 [ 460.042933][T10535] IPVS: stopping backup sync thread 4655 ... [ 460.051126][ T1959] 0XD: left promiscuous mode [ 460.056108][ T1959] 0XD: entered allmulticast mode [ 460.062218][ T1959] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 460.080484][ T1966] ip6gre1: entered allmulticast mode [ 460.128361][T10535] hsr_slave_0: left promiscuous mode [ 460.134927][T10535] hsr_slave_1: left promiscuous mode [ 460.144705][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.152237][T10535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.160878][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.168334][T10535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.177316][ T30] audit: type=1400 audit(1741484524.978:40519): avc: denied { setopt } for pid=1967 comm="syz.1.11777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.177837][ T1968] No such timeout policy "syz0" [ 460.214666][ T30] audit: type=1400 audit(1741484525.008:40520): avc: denied { execute } for pid=1971 comm="syz.2.11782" path="/1166/bus" dev="tmpfs" ino=6110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.244024][ T1977] 9pnet_rdma: rdma_create_trans (1977): problem binding to privport: 13 [ 460.253014][T10535] veth1_macvtap: left allmulticast mode [ 460.258459][ T30] audit: type=1400 audit(1741484525.038:40521): avc: denied { create } for pid=1976 comm="syz.6.11784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 460.258705][T10535] veth1_macvtap: left promiscuous mode [ 460.322728][T10535] veth0_macvtap: left promiscuous mode [ 460.338432][ T30] audit: type=1400 audit(1741484525.128:40522): avc: denied { write } for pid=1980 comm="syz.6.11786" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.359515][ T30] audit: type=1400 audit(1741484525.128:40523): avc: denied { open } for pid=1980 comm="syz.6.11786" path="/115/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.503792][ T30] audit: type=1400 audit(1741484525.298:40524): avc: denied { write } for pid=1984 comm="syz.1.11788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 460.530468][ T30] audit: type=1400 audit(1741484525.318:40525): avc: denied { nlmsg_read } for pid=1984 comm="syz.1.11788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 460.580124][ T1947] chnl_net:caif_netlink_parms(): no params data found [ 460.621955][ T1947] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.629068][ T1947] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.636489][ T1947] bridge_slave_0: entered allmulticast mode [ 460.643012][ T1947] bridge_slave_0: entered promiscuous mode [ 460.649858][ T1947] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.656987][ T1947] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.673697][ T1947] bridge_slave_1: entered allmulticast mode [ 460.680383][ T1947] bridge_slave_1: entered promiscuous mode [ 460.703493][ T1947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.716021][ T1947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.738888][ T1947] team0: Port device team_slave_0 added [ 460.748288][ T1947] team0: Port device team_slave_1 added [ 460.774040][ T1947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.781180][ T1947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.807426][ T1947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.821640][ T1947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.828622][ T1947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.854694][ T1947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.886301][ T1947] hsr_slave_0: entered promiscuous mode [ 460.892575][ T1947] hsr_slave_1: entered promiscuous mode [ 460.898396][ T1947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.906358][ T1947] Cannot create hsr debugfs directory [ 461.174390][ T2006] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11792'. [ 461.188136][ T2008] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11791'. [ 461.202035][ T2006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2006 comm=syz.6.11792 [ 461.211299][ T2008] 0XD: entered promiscuous mode [ 461.220358][ T2008] 0XD: left allmulticast mode [ 461.231296][ T2008] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11791'. [ 461.251497][ T2008] 0XD: renamed from 00XD [ 461.258718][ T2008] 0XD: left promiscuous mode [ 461.263674][ T2008] 0XD: entered allmulticast mode [ 461.279815][ T2008] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 461.340805][ T2016] loop6: detected capacity change from 0 to 1024 [ 461.357820][T10535] veth0_to_hsr: left allmulticast mode [ 461.363416][T10535] veth0_to_hsr: left promiscuous mode [ 461.368907][T10535] GPL: port 1(veth0_to_hsr) entered disabled state [ 461.382674][ T2016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.428211][ T2024] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 461.428221][T10535] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 461.453729][T10535] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 461.464904][ T2016] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.11797: Allocating blocks 385-513 which overlap fs metadata [ 461.517082][ T2016] EXT4-fs (loop6): pa ffff88810650c700: logic 16, phys. 129, len 24 [ 461.525182][ T2016] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 461.551675][ T2016] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 461.564249][ T2016] EXT4-fs (loop6): This should not happen!! Data will be lost [ 461.564249][ T2016] [ 461.573959][ T2016] EXT4-fs (loop6): Total free blocks count 0 [ 461.580056][ T2016] EXT4-fs (loop6): Free/Dirty block details [ 461.585976][ T2016] EXT4-fs (loop6): free_blocks=128 [ 461.591149][ T2016] EXT4-fs (loop6): dirty_blocks=0 [ 461.596272][ T2016] EXT4-fs (loop6): Block reservation details [ 461.602294][ T2016] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 461.631545][T10535] $H (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.646164][T10535] $H (unregistering): Released all slaves [ 461.660906][T10535] bond1 (unregistering): Released all slaves [ 461.669805][T10535] bond2 (unregistering): Released all slaves [ 461.678295][T10535] bond0 (unregistering): Released all slaves [ 461.689525][T10535] bond3 (unregistering): (slave veth15): Releasing active interface [ 461.701092][T10535] bond3 (unregistering): Released all slaves [ 461.792453][T10535] tipc: Disabling bearer [ 461.797777][T10535] tipc: Disabling bearer [ 461.802798][T10535] tipc: Disabling bearer [ 461.808100][T10535] tipc: Left network mode [ 461.854748][ T1947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.930256][ T1947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.935834][ T2046] loop6: detected capacity change from 0 to 256 [ 461.946096][ T1947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.956494][ T1947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.964436][T10535] IPVS: stopping backup sync thread 26772 ... [ 462.026845][T10535] hsr_slave_0: left promiscuous mode [ 462.049364][T10535] hsr_slave_1: left promiscuous mode [ 462.196557][ T1947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.211241][ T1947] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.222938][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.230046][T10509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.250034][ T1947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.260506][ T1947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.274478][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.281593][T10509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.305752][T10535] IPVS: stop unused estimator thread 0... [ 462.344214][ T1947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.412506][ T1947] veth0_vlan: entered promiscuous mode [ 462.422234][ T1947] veth1_vlan: entered promiscuous mode [ 462.441555][ T1947] veth0_macvtap: entered promiscuous mode [ 462.451092][ T1947] veth1_macvtap: entered promiscuous mode [ 462.462835][ T1947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.477100][ T1947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.487252][ T1947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.496151][ T1947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.505052][ T1947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.514034][ T1947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.577906][ T2063] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11808'. [ 462.590765][ T2060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.606149][ T2063] 0XD: entered promiscuous mode [ 462.613404][ T2063] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11808'. [ 462.623090][ T2063] 1XD: renamed from 30XD [ 462.630847][ T2063] 1XD: left promiscuous mode [ 462.635752][ T2063] 1XD: entered allmulticast mode [ 462.643437][ T2063] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 462.839042][ T2074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11815'. [ 463.224370][ T2092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11821'. [ 463.241052][ T2085] wireguard0: entered promiscuous mode [ 463.246565][ T2085] wireguard0: entered allmulticast mode [ 463.437534][ T2098] loop6: detected capacity change from 0 to 1024 [ 463.448529][ T2098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.602711][ T2098] ================================================================== [ 463.610940][ T2098] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 463.618101][ T2098] [ 463.620442][ T2098] write to 0xffff888116edbd24 of 4 bytes by task 2101 on cpu 1: [ 463.628088][ T2098] xas_set_mark+0x131/0x150 [ 463.632644][ T2098] __folio_start_writeback+0x1e8/0x430 [ 463.638134][ T2098] ext4_bio_write_folio+0x591/0x9d0 [ 463.643365][ T2098] mpage_process_page_bufs+0x486/0x5d0 [ 463.648841][ T2098] mpage_prepare_extent_to_map+0x788/0xb80 [ 463.654682][ T2098] ext4_do_writepages+0xa20/0x2130 [ 463.659825][ T2098] ext4_writepages+0x159/0x2e0 [ 463.664621][ T2098] do_writepages+0x1d8/0x480 [ 463.669245][ T2098] file_write_and_wait_range+0x168/0x2f0 [ 463.674907][ T2098] generic_buffers_fsync_noflush+0x46/0x120 [ 463.680829][ T2098] ext4_sync_file+0x1ff/0x6c0 [ 463.685553][ T2098] vfs_fsync_range+0x116/0x130 [ 463.690355][ T2098] ext4_buffered_write_iter+0x358/0x3c0 [ 463.695943][ T2098] ext4_file_write_iter+0x383/0xf20 [ 463.701173][ T2098] iter_file_splice_write+0x5f1/0x980 [ 463.706583][ T2098] direct_splice_actor+0x160/0x2c0 [ 463.711730][ T2098] splice_direct_to_actor+0x302/0x670 [ 463.717141][ T2098] do_splice_direct+0xd7/0x150 [ 463.721930][ T2098] do_sendfile+0x398/0x660 [ 463.726366][ T2098] __x64_sys_sendfile64+0x110/0x150 [ 463.731604][ T2098] x64_sys_call+0xfbd/0x2dc0 [ 463.736215][ T2098] do_syscall_64+0xc9/0x1c0 [ 463.740744][ T2098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.746850][ T2098] [ 463.749202][ T2098] read to 0xffff888116edbd24 of 4 bytes by task 2098 on cpu 0: [ 463.756767][ T2098] xas_find_marked+0x608/0x650 [ 463.761588][ T2098] find_get_entry+0x54/0x390 [ 463.766215][ T2098] filemap_get_folios_tag+0x9e/0x210 [ 463.771523][ T2098] mpage_prepare_extent_to_map+0x329/0xb80 [ 463.777356][ T2098] ext4_do_writepages+0x6ea/0x2130 [ 463.782506][ T2098] ext4_writepages+0x159/0x2e0 [ 463.787304][ T2098] do_writepages+0x1d8/0x480 [ 463.791912][ T2098] file_write_and_wait_range+0x168/0x2f0 [ 463.797589][ T2098] generic_buffers_fsync_noflush+0x46/0x120 [ 463.803501][ T2098] ext4_sync_file+0x1ff/0x6c0 [ 463.808234][ T2098] vfs_fsync_range+0x116/0x130 [ 463.813051][ T2098] ext4_buffered_write_iter+0x358/0x3c0 [ 463.818647][ T2098] ext4_file_write_iter+0x383/0xf20 [ 463.823892][ T2098] iter_file_splice_write+0x5f1/0x980 [ 463.829293][ T2098] direct_splice_actor+0x160/0x2c0 [ 463.834419][ T2098] splice_direct_to_actor+0x302/0x670 [ 463.839825][ T2098] do_splice_direct+0xd7/0x150 [ 463.844633][ T2098] do_sendfile+0x398/0x660 [ 463.849070][ T2098] __x64_sys_sendfile64+0x110/0x150 [ 463.854317][ T2098] x64_sys_call+0xfbd/0x2dc0 [ 463.858938][ T2098] do_syscall_64+0xc9/0x1c0 [ 463.863480][ T2098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.869424][ T2098] [ 463.871794][ T2098] value changed: 0x0a000021 -> 0x04000021 [ 463.877519][ T2098] [ 463.879902][ T2098] Reported by Kernel Concurrency Sanitizer on: [ 463.886077][ T2098] CPU: 0 UID: 0 PID: 2098 Comm: syz.6.11822 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 463.898334][ T2098] Tainted: [W]=WARN [ 463.902145][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.912402][ T2098] ================================================================== [ 464.243913][ T2060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.344015][T32434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.532091][ T2060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.672274][ T2060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.735694][ T2060] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.746775][ T2060] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.757829][ T2060] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.769146][ T2060] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0