last executing test programs: 5m24.463874588s ago: executing program 2 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5m24.390893518s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) close_range(r3, 0xffffffffffffffff, 0x0) 5m23.877690226s ago: executing program 32 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 5m23.518201621s ago: executing program 2 (id=122): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5m23.340264704s ago: executing program 2 (id=126): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, 0x0) 5m22.94118453s ago: executing program 2 (id=131): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r2, &(0x7f0000000040), 0x8) openat(0xffffffffffffffff, 0x0, 0x0, 0x131) 5m22.597381805s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) creat(&(0x7f00000001c0)='./bus\x00', 0x4e) 5m22.509060637s ago: executing program 2 (id=140): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 5m22.508696077s ago: executing program 33 (id=140): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 5m21.830298016s ago: executing program 0 (id=145): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe9ba1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0xde) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 5m21.546554921s ago: executing program 0 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@noinit_itable}]}, 0x64, 0x51a, &(0x7f00000007c0)="$eJzs3UFvG1kdAPD/OHZI2nSTBQ6wEsvCLkorqJ1s2N2IQykSglMloNxLSJwoihNHsdM2UQWp+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIWjhwAE6K9uTNE3sxG3dOI1/P2ky772Z8f89RzOeN/M0E8DAeiMirkbEozRNL0XEeFaey6bYaU2N9R4+uDPfmJJI0+v/TCLJynY/K8nm57PNRiLia1+O+GZyOG5ta3tlrlIpb2T5Un11vVTb2r68vDq3VF4qr83MTL87+97sO7NTPWnnhYi48sW//uC7P/vSlV995tafbvz94rca1RrLlu9vx1PKH7Ww1fRC87vYv8HGMwY7jfLNFmZG260xdKjk7guuEwAA7TXO8T8YEZ+MiEsxHkNHn84CAAAAL6H082PxvyQibW+4QzkAAADwEsk1x8AmuWI2FmAscrlisTWG98NxLlep1uqfXqxuri20xspORCG3uFwpT2VjhSeikDTy08304/zbB/IzEfFqRHx/fLSZL85XKwv9vvgBAAAAA+L8gf7/f8Zb/X8AAADgjJnodwUAAACAF07/HwAAAM4+/X8AAAA4075y7VpjSnfff71wc2tzpXrz8kK5tlJc3Zwvzlc31otL1epS85l9q8d9XqVaXf9srG3eLtXLtXqptrV9Y7W6uVa/sfzEK7ABAACAE/Tqx+/9IYmInc+NNqeG4e427XI14LTK76WSbN5mt/7jK635X06oUsCJGOp3BYC+yfe7AkDfFPpdAaDvkmOWdxy889ts/one1gcAAOi9yY92vv+fO3LLnaMXA6eenRgGl/v/MLia9/+7HcnrZAHOlIIzABh4z33//1hp+lQVAgAAem6sOSW5YnZ5byxyuWIx4kLztQCFZHG5Up6KiFci4vfjhQ808tPNLZNj+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAZ1pE7m/Jr1vP8p8cf2vs4PWB4eS/45G9IvTWj6//8PZcvb4x3Sj/1155/UdZ+dv9uIIBAAAAA+GpXuC/20/f7ccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC89fHBnfnc6ybj/+EJETLSLn4+R5nwkChFx7t9J5Pdtl0TEUA/ijzb+fKRd/KQRYy9ku/ijPYi/c7dz/InmVzPSNv5wRJzvQXwYZPcax5+r7fa/XLzRnLff//IRT+SfVefjX+wd/4Y6HH8udBnjtfu/KHWMfzfitXz7489u/KRD/De7jP+Nr29vd1qW/iRisu3vT/JErFJ9db1U29q+vLw6t1ReKq/NzEy/O/ve7DuzU6XF5Uo5+9s2xvc+9stHR7X/XIf4E8e0/60u2///+7cffKiVLLSLf/HNNvF/89NsjcPxc9lv36eydGP55G56p5Xe7/Wf/+71o9q/0KH9x/3/L3bZ/ktf/c6fu1wVADgBta3tlblKpbxxZhONXvopqMahRC5ORTU6JoaHTkU1Xmji2z39wDRN08Y+9Ryfk8Rp+FqaiX4fmQAAgF57fNLf75oAAAAAAAAAAAAAAAAAAADA4DqJx4kdjLmzl0p68QhtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeeD8AAP//KcLXkw==") 5m21.546286481s ago: executing program 1 (id=148): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/29, 0x1d, 0x6, 0x0, 0x0, 0xffffff00}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5m21.448970142s ago: executing program 1 (id=150): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e740009050197"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/242, 0xf2}, 0x57}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/1, 0x1}, 0x7ff}], 0x2, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="792812ed06ed1ad37e71332906fddcd6b4f21a66e7a7a6056d0dd5bde355ec0a9c101c36b0a4b4671adc56fb5d6260a68dc80cc4b49d869ac66e304d387bfd3c91a18c2da0c364335bd7ad0f9d1f5112968199bd85168ebf084c7c7a685103431f599cbf618aafd18b94407dcf766fb11ec6f662eab5b32baf3fa38d6b1367db1acfebbc199ab2c5ed5fb337a4ce4a01b716ea065ceb60ce6c486ae28a808d8dbdc9a6252cbf12de1a6e56c3182b33d67765ebe9dc08f5a35f0bd7077e006ec41e8e567a802a8dc6b99145d70df3027664789d879867c11d8fb50404", 0xdc, 0x90c5, &(0x7f0000000180)={0xa, 0x4e24, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x20, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r1, &(0x7f0000000040)='net/psched\x00') 5m21.332352214s ago: executing program 0 (id=152): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, 0x0) 5m21.010544429s ago: executing program 0 (id=153): creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) open(0x0, 0x147842, 0x49) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8905, &(0x7f00000006c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 5m20.674344753s ago: executing program 1 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m20.436837877s ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 5m20.436523667s ago: executing program 34 (id=160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 5m20.357858028s ago: executing program 1 (id=162): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, 0x0) 5m20.034212883s ago: executing program 1 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000ff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0x4000) 5m19.424873612s ago: executing program 1 (id=169): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 5m19.424684922s ago: executing program 35 (id=169): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 56.800836853s ago: executing program 3 (id=3714): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401000000000000004cf80500000a1400"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 56.770974923s ago: executing program 3 (id=3718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 56.652971264s ago: executing program 3 (id=3726): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x82) 56.581128626s ago: executing program 3 (id=3734): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x4, 'Cr\a\x00'}}) 56.580925496s ago: executing program 3 (id=3736): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'caif0\x00', @broadcast}) 56.579889456s ago: executing program 3 (id=3737): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 49.917757052s ago: executing program 8 (id=4082): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 49.898545332s ago: executing program 8 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') 49.846446303s ago: executing program 8 (id=4086): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = epoll_create(0x401) epoll_wait(r0, &(0x7f0000000e80)=[{}], 0x1, 0x0) 49.846054293s ago: executing program 8 (id=4089): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) 49.796919063s ago: executing program 8 (id=4093): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) sendto$l2tp(r0, &(0x7f0000000080)="e5786a10000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x300, 0x10040, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 49.773578744s ago: executing program 8 (id=4095): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 49.756523304s ago: executing program 36 (id=4095): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 41.554211872s ago: executing program 37 (id=3737): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.516139278s ago: executing program 9 (id=6535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1.448145628s ago: executing program 9 (id=6540): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3}, 0x10) 1.396661019s ago: executing program 9 (id=6542): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x23) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32, @ANYBLOB="140001"], 0x2c}}, 0x24005040) 1.396233089s ago: executing program 9 (id=6551): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.3727401s ago: executing program 9 (id=6555): munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x48800) syz_usb_disconnect(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 1.265736341s ago: executing program 4 (id=6550): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2ab, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x145342, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 1.265257521s ago: executing program 4 (id=6553): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x67) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c) sendmsg$key(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfcc8}}, 0x4000010) 1.032545295s ago: executing program 5 (id=6568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 1.019115855s ago: executing program 6 (id=6570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000023000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 1.002283725s ago: executing program 6 (id=6571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e00), 0x0, 0x4004850) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 975.250295ms ago: executing program 6 (id=6573): socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x3, 0xfffffffffff7fbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 974.758855ms ago: executing program 7 (id=6574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000011c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000010, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000040)=0x40) 924.540756ms ago: executing program 7 (id=6575): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 924.173346ms ago: executing program 7 (id=6576): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 923.889186ms ago: executing program 6 (id=6577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 923.702276ms ago: executing program 7 (id=6578): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}, 0x2}], 0x1, 0x2000, 0x0) 907.462526ms ago: executing program 4 (id=6579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2020c0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) 906.968526ms ago: executing program 7 (id=6580): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x02\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 860.318327ms ago: executing program 6 (id=6581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 824.831567ms ago: executing program 6 (id=6582): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="e0000002e00000010100"], 0x5000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0x93) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x591, &(0x7f00000008c0)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pJa9sSKvs5F3XWLjg3PiwBUJJE5w4cKJQyUOSD0hrtzgxqUckAqKQDUCoalmPBvvbnaTrb+2tn8/abTz5uv/3sjzxvPm4wVwal2OiK2IOBsR70TExUiK6Uk5xOs7Q77cRw82F7YfbC4kkWVv/XOi3MLmQkTas83zEfHjAbEqXeOt9Y3l+UajvlqmZ9ord2da6xsv3l6ZX6ov1e/Mzd2YvXHtlesvzx1YWZ9b+e2H37r9xg9+/7svfvCnrW/8KC/fa+W8vGxdiyZZlu0/4GvlPozJmC4n5Xsq33Nv7H/rnwpnyvKcHXdG2JP87/EzEfF89B3F1fHlCQA4XFl2MbKL3eldaU8qy5IBywAAx09+zT8dSVorr/+nI01rtaINr/pMnEsbzVb76q3m2p2kbMqKyfTW7Ub9WtFWGFGJySRPz0bEpWLYSc/1pa9HxNMR8dPKVJGuLTQbi2P5jwcAON93/v93JT//V0ZZ1R0CADjOnMkB4PR59Pw/OZZ8AABHx/U/AJw+Xef/ke78AwDHX7X/Cx6DPHz9DwA4CQa2/799YXf82YefAwMATgj3/wHgVPnem2/mQ7adJcX3rxffXV9bbr774mK9tVxbWVuoLTRX79aWms2l4ps9KwM2cb870Wg2786+FGv3Ztr1Vnumtb5xc6W5dqd9s/iu9826FwsAYPyefu79vyQRsfXqVDFEpy+HJz8QABxzacTUuPMAjMeZcWcAGJuJcWcAGBvt8cCTHu4d+IjQVET8fPg6Ghbg0+3K54a0//f/b9B7P+D/B9A7NjBm5WGtGQBOof21/2s9gOPs8Sd+LwbBSZZlif78AeCUGeEK3iOCcMLt6f4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHLTxZCktbIv8OlI01ot4kJEXIrJ5NbtRv1aRDwVEX+uTFby9Oy4Mw0A7FP696Ts/+vKxRem++eeTf5TKX4j4oe/eOtn9+bbna4DH05vT0XEfLu9OjcwQOXwywAAdJnon3CvPE8Xv10X8h892FzoDEeZwQ+/udO5aB53+8Hmwm5/xBNl5quRTzv3r6SnMMkBdUy8dT8inu0vf/pw/qWy59P++HnsC4cWP4oSTvfE7/03Ki3m7fzm++KzUyPGO4A8w0nxfl7/vD7o+EvjcvFbHn8TvZVpNX7yaOW6B536bzvbqf+2u+Ln2//uhWpR1wyq/y6PGuOlP3x76Lz7Z7LPT0R0Ym931T87qsXYoPgvjBj/r1/40vPDdlb2y4gr8bj4O2Mz7ZW7M631jd98570/LtWX6nfm5m7M3rj2yvWX52aKNuqZTkv1o/7x6tWnhpc/4tyQ+NUnlP+rI5b/V/975+0vPyb+178yKH4azzwmfn5O/FqsjhR//tx7Q7vvzuMvDin/RE/8sz3r5dOu9m9syB/kB3/bWBwpowDAkWitbyzPNxr11VFG0thYnu9caI68Vs/I1J7WGnEkDm3Lg0cme3ZC9bBinR8y69efeIOTcaT758BG7n+ChSvjyeqZaHTao564cLnc1n6CZtk+8nx5hGXGVCEBR2b3oB99nf+WDwAcZr4AAAAAAAAAAAAAAIBdre+Xn/w74Jeiul+GG3cZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLk+DgAA///sGM0h") 806.906618ms ago: executing program 4 (id=6583): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 748.665299ms ago: executing program 4 (id=6584): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioprio_set$pid(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 739.858489ms ago: executing program 4 (id=6585): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee00) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 227.674316ms ago: executing program 5 (id=6586): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 160.947357ms ago: executing program 5 (id=6587): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x403) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, 0x0, 0x80) 160.677607ms ago: executing program 5 (id=6588): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000500)={'vlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 129.842557ms ago: executing program 5 (id=6589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f0000000200), 0x4) 106.476148ms ago: executing program 5 (id=6590): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x885, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 697.34µs ago: executing program 9 (id=6591): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=6592): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) kernel console output (not intermixed with test programs): 4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.8.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6a81e929 code=0x7ffc0000 [ 282.679777][T13706] tipc: Enabling of bearer rejected, failed to enable media [ 282.700393][T13675] syz.5.3094 (13675) used greatest stack depth: 6064 bytes left [ 282.852444][T13714] lo speed is unknown, defaulting to 1000 [ 282.887500][T13714] lo speed is unknown, defaulting to 1000 [ 282.893591][T13714] lo speed is unknown, defaulting to 1000 [ 282.958789][ T4873] IPVS: starting estimator thread 0... [ 283.367962][T13721] IPVS: using max 2880 ests per chain, 144000 per kthread [ 283.606608][T13734] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 283.614548][T13734] __nla_validate_parse: 6 callbacks suppressed [ 283.614564][T13734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3109'. [ 283.717977][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 284.495027][T13760] futex_wake_op: syz.7.3114 tries to shift op by -1; fix this program [ 284.510169][T13743] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 284.530094][T13763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=13763 comm=syz.5.3116 [ 284.769067][T13778] lo speed is unknown, defaulting to 1000 [ 284.775363][T13778] lo speed is unknown, defaulting to 1000 [ 284.782120][T13778] lo speed is unknown, defaulting to 1000 [ 284.795172][T13780] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.840391][T13780] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.878568][T13780] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.938566][T13780] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.983805][T13780] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.995499][T13780] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.007487][T13780] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.019508][T13780] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.241803][T13795] bond0: (slave dummy0): Releasing backup interface [ 285.249581][T13795] dummy0: left promiscuous mode [ 285.262995][T13795] bond1: (slave veth0_to_bond): Releasing active interface [ 285.272450][T13795] bond0: (slave c@): Releasing backup interface [ 285.280136][T13795] @: left promiscuous mode [ 285.285776][T13795] bond0: (slave bond_slave_1): Releasing backup interface [ 285.294347][T13795] bond_slave_1: left promiscuous mode [ 285.301139][T13795] team_slave_0: left promiscuous mode [ 285.306983][T13795] team0: Port device team_slave_0 removed [ 285.313947][T13795] team_slave_1: left promiscuous mode [ 285.320587][T13795] team0: Port device team_slave_1 removed [ 285.327559][T13795] geneve1: left promiscuous mode [ 285.333861][T13795] team0: Port device geneve1 removed [ 285.374940][T13797] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 285.436194][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3126'. [ 285.436843][T13803] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3135'. [ 285.454305][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3135'. [ 285.488244][T13805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13805 comm=syz.6.3126 [ 285.573217][T13813] batadv_slave_1: entered promiscuous mode [ 285.631333][T13812] batadv_slave_1: left promiscuous mode [ 285.724078][T13816] wireguard0: entered promiscuous mode [ 285.963625][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3130'. [ 286.058191][T13822] lo speed is unknown, defaulting to 1000 [ 286.064409][T13822] lo speed is unknown, defaulting to 1000 [ 286.070529][T13822] lo speed is unknown, defaulting to 1000 [ 286.384753][T13825] lo speed is unknown, defaulting to 1000 [ 286.390968][T13825] lo speed is unknown, defaulting to 1000 [ 286.397232][T13825] lo speed is unknown, defaulting to 1000 [ 286.505717][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3131'. [ 286.840180][T13828] netlink: 'syz.6.3132': attribute type 4 has an invalid length. [ 287.186329][T13847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13847 comm=syz.3.3137 [ 287.199165][T13847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13847 comm=syz.3.3137 [ 287.352450][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 287.352469][ T29] audit: type=1326 audit(1749416043.193:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.461281][ T29] audit: type=1326 audit(1749416043.233:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.485223][ T29] audit: type=1326 audit(1749416043.233:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.508786][ T29] audit: type=1326 audit(1749416043.233:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.532429][ T29] audit: type=1326 audit(1749416043.233:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.556077][ T29] audit: type=1326 audit(1749416043.233:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.579738][ T29] audit: type=1326 audit(1749416043.233:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.603610][ T29] audit: type=1326 audit(1749416043.233:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.627525][ T29] audit: type=1326 audit(1749416043.233:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.651146][ T29] audit: type=1326 audit(1749416043.233:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.7.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 287.947118][T13842] 9pnet_fd: Insufficient options for proto=fd [ 288.137195][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3143'. [ 288.154793][T13865] 9pnet_fd: Insufficient options for proto=fd [ 288.365252][ T4873] Process accounting resumed [ 288.378700][T13878] netlink: 'syz.7.3146': attribute type 4 has an invalid length. [ 288.614476][T13882] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 288.711775][T13886] lo speed is unknown, defaulting to 1000 [ 288.718266][T13886] lo speed is unknown, defaulting to 1000 [ 288.724820][T13886] lo speed is unknown, defaulting to 1000 [ 289.452641][T13891] $H: (slave bridge0): Releasing backup interface [ 289.460222][T13891] bridge0: left promiscuous mode [ 289.465306][T13891] bridge0: left allmulticast mode [ 289.498034][T13891] bridge0: port 3(dummy0) entered disabled state [ 289.504483][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.511676][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.535955][T13891] bridge0: port 3(dummy0) entered disabled state [ 289.573049][T13891] bridge_slave_0: left allmulticast mode [ 289.578817][T13891] bridge_slave_0: left promiscuous mode [ 289.584488][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.623884][T13891] bridge_slave_1: left allmulticast mode [ 289.626291][T13898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3152'. [ 289.629603][T13891] bridge_slave_1: left promiscuous mode [ 289.629724][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.669774][T13891] $H: (slave bond_slave_0): Releasing backup interface [ 289.677668][T13891] bond_slave_0: left promiscuous mode [ 289.683227][T13891] bond_slave_0: left allmulticast mode [ 289.718133][T13891] $H: (slave bond_slave_1): Releasing backup interface [ 289.726221][T13891] bond_slave_1: left promiscuous mode [ 289.731754][T13891] bond_slave_1: left allmulticast mode [ 289.747230][T13891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.768082][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3154'. [ 289.778279][T13891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.785838][T13891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.795663][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 290.167068][T13915] lo speed is unknown, defaulting to 1000 [ 290.173823][T13915] lo speed is unknown, defaulting to 1000 [ 290.180281][T13915] lo speed is unknown, defaulting to 1000 [ 290.610418][T13941] xt_connbytes: Forcing CT accounting to be enabled [ 290.657416][T13936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=13936 comm=syz.7.3161 [ 290.717680][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3162'. [ 290.783012][T13948] netlink: 'syz.6.3165': attribute type 39 has an invalid length. [ 290.838212][T13946] siw: device registration error -23 [ 291.165007][T13957] lo speed is unknown, defaulting to 1000 [ 291.171476][T13957] lo speed is unknown, defaulting to 1000 [ 291.178412][T13957] lo speed is unknown, defaulting to 1000 [ 291.418424][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3167'. [ 291.429664][T11119] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 291.811689][T13969] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 291.900310][T13941] Cannot find set identified by id 0 to match [ 291.910209][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3171'. [ 292.003190][T13975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13975 comm=syz.7.3171 [ 292.029149][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3173'. [ 292.091018][T13986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=13986 comm=syz.6.3175 [ 292.147256][T13992] netlink: 'syz.6.3177': attribute type 10 has an invalid length. [ 292.155277][T13992] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3177'. [ 292.164715][T13992] net_ratelimit: 42 callbacks suppressed [ 292.164733][T13992] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 292.187951][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3177'. [ 292.208357][T13992] netlink: 'syz.6.3177': attribute type 27 has an invalid length. [ 292.216490][T13992] dummy0: left promiscuous mode [ 292.326965][T14006] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 292.366312][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 292.366337][ T29] audit: type=1326 audit(1749416048.203:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.397154][ T29] audit: type=1326 audit(1749416048.203:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.420923][ T29] audit: type=1326 audit(1749416048.203:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.444750][ T29] audit: type=1326 audit(1749416048.203:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.468493][ T29] audit: type=1326 audit(1749416048.203:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.492167][ T29] audit: type=1326 audit(1749416048.213:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.515860][ T29] audit: type=1326 audit(1749416048.213:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.539576][ T29] audit: type=1326 audit(1749416048.213:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.563405][ T29] audit: type=1326 audit(1749416048.213:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.587249][ T29] audit: type=1326 audit(1749416048.213:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.7.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 292.825331][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 292.887988][T14022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14022 comm=syz.3.3188 [ 293.352053][T14042] lo speed is unknown, defaulting to 1000 [ 293.358971][T14042] lo speed is unknown, defaulting to 1000 [ 293.365248][T14042] lo speed is unknown, defaulting to 1000 [ 294.757422][ T3407] page_pool_release_retry() stalled pool shutdown: id 72, 2 inflight 60 sec [ 295.077673][T11119] page_pool_release_retry() stalled pool shutdown: id 73, 1 inflight 60 sec [ 295.450431][T14166] lo speed is unknown, defaulting to 1000 [ 295.456631][T14166] lo speed is unknown, defaulting to 1000 [ 295.462821][T14166] lo speed is unknown, defaulting to 1000 [ 295.533340][T14172] 9pnet_fd: Insufficient options for proto=fd [ 296.046578][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3288'. [ 296.541508][T14317] netlink: 'syz.5.3323': attribute type 10 has an invalid length. [ 296.565503][T14319] netlink: 'syz.5.3324': attribute type 13 has an invalid length. [ 296.579548][T14319] gretap0: refused to change device tx_queue_len [ 296.586027][T14319] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 296.601811][T11119] lo speed is unknown, defaulting to 1000 [ 296.607581][T11119] s: Port: 1 Link ACTIVE [ 296.881604][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3332'. [ 296.917926][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3335'. [ 296.948946][T14347] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 297.206683][T14395] netlink: 'syz.6.3363': attribute type 1 has an invalid length. [ 297.214541][T14395] netlink: 'syz.6.3363': attribute type 2 has an invalid length. [ 297.310404][T14411] netlink: 'syz.8.3368': attribute type 46 has an invalid length. [ 297.318438][T14411] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3368'. [ 297.471676][T14430] xt_TCPMSS: Only works on TCP SYN packets [ 297.582884][T14455] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3388'. [ 297.597422][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 297.597438][ T29] audit: type=1326 audit(1749416053.454:14118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.603324][T14457] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 297.603720][ T29] audit: type=1326 audit(1749416053.454:14119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.659244][ T29] audit: type=1326 audit(1749416053.454:14120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.705908][ T29] audit: type=1326 audit(1749416053.544:14121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.729685][ T29] audit: type=1326 audit(1749416053.544:14122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.753512][ T29] audit: type=1326 audit(1749416053.544:14123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.777154][ T29] audit: type=1326 audit(1749416053.544:14124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.801092][ T29] audit: type=1326 audit(1749416053.544:14125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.5.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 297.838745][T14484] openvswitch: netlink: Message has 6 unknown bytes. [ 298.330938][T14572] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3444'. [ 298.337405][ T29] audit: type=1400 audit(1749416054.184:14126): avc: denied { nlmsg_read } for pid=14571 comm="syz.6.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.399614][T14583] openvswitch: netlink: Message has 6 unknown bytes. [ 298.424167][T14587] vti0: entered promiscuous mode [ 298.636607][T14639] ip6tnl2: entered promiscuous mode [ 298.642001][T14639] ip6tnl2: entered allmulticast mode [ 298.676567][T14647] netlink: 'syz.6.3479': attribute type 1 has an invalid length. [ 298.689561][ T29] audit: type=1326 audit(1749416054.544:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14621 comm="syz.3.3469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34c0a6e929 code=0x0 [ 299.087683][T14741] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3520'. [ 299.394788][T14806] netlink: 'syz.8.3553': attribute type 13 has an invalid length. [ 299.476539][T14806] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.485217][T14806] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.493802][T14806] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.502203][T14806] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.607146][T14839] netlink: 23 bytes leftover after parsing attributes in process `syz.8.3569'. [ 299.674361][T14854] ip6tnl1: entered promiscuous mode [ 299.678077][T14856] x_tables: duplicate entry at hook 3 [ 299.679855][T14854] ip6tnl1: entered allmulticast mode [ 299.986271][T14911] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3604'. [ 300.103857][T14932] C: renamed from team_slave_0 [ 300.110770][T14932] netlink: 'syz.3.3614': attribute type 1 has an invalid length. [ 300.118643][T14932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3614'. [ 300.127740][T14932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.348830][T14964] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.462478][T14981] C: renamed from team_slave_0 [ 300.478811][T14981] netlink: 'syz.8.3638': attribute type 1 has an invalid length. [ 300.486608][T14981] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.685909][T15023] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 301.047711][T15066] netlink: 'syz.8.3680': attribute type 21 has an invalid length. [ 301.055720][T15066] __nla_validate_parse: 1 callbacks suppressed [ 301.055733][T15066] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3680'. [ 301.176319][T15086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3689'. [ 301.220988][T15090] lo speed is unknown, defaulting to 1000 [ 301.227179][T15090] lo speed is unknown, defaulting to 1000 [ 301.233349][T15090] lo speed is unknown, defaulting to 1000 [ 301.606801][T15138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15138 comm=syz.3.3714 [ 301.836584][T15182] caif0: entered promiscuous mode [ 301.841662][T15182] caif0: entered allmulticast mode [ 301.852362][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3732'. [ 301.910648][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3741'. [ 301.919839][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3741'. [ 301.943066][T15197] SELinux: security_context_str_to_sid (lN}ĽwL&bYKBB2k?j1p-X!A:?qDV') failed with errno=-22 [ 302.330334][T15284] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 302.643533][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 302.643550][ T29] audit: type=1326 audit(1749416058.494:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.7.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.677685][ T29] audit: type=1326 audit(1749416058.494:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.7.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.701318][ T29] audit: type=1326 audit(1749416058.514:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.7.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.725412][ T29] audit: type=1326 audit(1749416058.514:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.7.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.772452][ T29] audit: type=1326 audit(1749416058.624:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.796809][ T29] audit: type=1326 audit(1749416058.624:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.820822][ T29] audit: type=1326 audit(1749416058.654:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.844872][ T29] audit: type=1326 audit(1749416058.654:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.847791][T15369] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3787'. [ 302.886023][ T29] audit: type=1326 audit(1749416058.734:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 302.976818][T15391] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3791'. [ 303.158745][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3796'. [ 303.167927][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3796'. [ 303.341526][ T29] audit: type=1326 audit(1749416059.194:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.8.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6a81e929 code=0x7ffc0000 [ 303.660270][T15447] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3808'. [ 303.759788][T15467] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 303.900691][T15494] validate_nla: 1 callbacks suppressed [ 303.900778][T15494] netlink: 'syz.6.3830': attribute type 2 has an invalid length. [ 304.549433][T15578] netlink: 'syz.6.3867': attribute type 7 has an invalid length. [ 304.857574][T15612] netlink: 'syz.6.3883': attribute type 27 has an invalid length. [ 305.126024][T15591] syz.5.3874 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 305.136910][T15591] CPU: 1 UID: 0 PID: 15591 Comm: syz.5.3874 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 305.136944][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.136958][T15591] Call Trace: [ 305.136966][T15591] [ 305.136974][T15591] __dump_stack+0x1d/0x30 [ 305.136999][T15591] dump_stack_lvl+0xe8/0x140 [ 305.137080][T15591] dump_stack+0x15/0x1b [ 305.137100][T15591] dump_header+0x81/0x220 [ 305.137137][T15591] oom_kill_process+0x334/0x3f0 [ 305.137171][T15591] out_of_memory+0x979/0xb80 [ 305.137282][T15591] try_charge_memcg+0x5e6/0x9e0 [ 305.137319][T15591] charge_memcg+0x51/0xc0 [ 305.137355][T15591] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 305.137394][T15591] __read_swap_cache_async+0x1df/0x350 [ 305.137469][T15591] swap_cluster_readahead+0x376/0x3e0 [ 305.137512][T15591] swapin_readahead+0xde/0x6f0 [ 305.137546][T15591] ? __filemap_get_folio+0x49f/0x650 [ 305.137659][T15591] ? __rcu_read_unlock+0x34/0x70 [ 305.137719][T15591] ? swap_cache_get_folio+0x77/0x200 [ 305.137754][T15591] do_swap_page+0x301/0x2430 [ 305.137800][T15591] ? finish_task_switch+0xb6/0x2b0 [ 305.137820][T15591] ? css_rstat_updated+0xcd/0x5b0 [ 305.137852][T15591] ? __pfx_default_wake_function+0x10/0x10 [ 305.137945][T15591] handle_mm_fault+0x9a5/0x2be0 [ 305.137972][T15591] ? mas_walk+0xf2/0x120 [ 305.138050][T15591] do_user_addr_fault+0x636/0x1090 [ 305.138086][T15591] exc_page_fault+0x62/0xa0 [ 305.138116][T15591] asm_exc_page_fault+0x26/0x30 [ 305.138137][T15591] RIP: 0033:0x7f23655153be [ 305.138156][T15591] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 f6 27 35 00 85 c0 0f 8e a3 fd ff ff ad 9f fe ff 49 39 c4 73 a0 48 8d 1d d1 0b 35 00 83 3d d6 27 35 [ 305.138203][T15591] RSP: 002b:00007ffd42e34640 EFLAGS: 00010202 [ 305.138222][T15591] RAX: 0000000000000001 RBX: 00007f2365867ba0 RCX: 0000000000000000 [ 305.138237][T15591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555585e64808 [ 305.138251][T15591] RBP: 00007f2365867ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 305.138265][T15591] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004a91d [ 305.138279][T15591] R13: 00007ffd42e34730 R14: ffffffffffffffff R15: 00007ffd42e34750 [ 305.138301][T15591] [ 305.357324][T15591] memory: usage 307200kB, limit 307200kB, failcnt 4202 [ 305.364659][T15591] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0 [ 305.372642][T15591] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 305.379992][T15591] Memory cgroup stats for /syz5: [ 305.380706][T15591] cache 0 [ 305.388740][T15591] rss 0 [ 305.391509][T15591] shmem 0 [ 305.394583][T15591] mapped_file 0 [ 305.398204][T15591] dirty 0 [ 305.401151][T15591] writeback 0 [ 305.404519][T15591] workingset_refault_anon 1649 [ 305.409483][T15591] workingset_refault_file 17 [ 305.414322][T15591] swap 335872 [ 305.417711][T15591] swapcached 0 [ 305.421173][T15591] pgpgin 405098 [ 305.424640][T15591] pgpgout 405098 [ 305.428293][T15591] pgfault 385953 [ 305.431883][T15591] pgmajfault 197 [ 305.435444][T15591] inactive_anon 0 [ 305.439145][T15591] active_anon 0 [ 305.442656][T15591] inactive_file 0 [ 305.446375][T15591] active_file 0 [ 305.450061][T15591] unevictable 0 [ 305.453543][T15591] hierarchical_memory_limit 314572800 [ 305.458990][T15591] hierarchical_memsw_limit 9223372036854771712 [ 305.465159][T15591] total_cache 0 [ 305.468745][T15591] total_rss 0 [ 305.472042][T15591] total_shmem 0 [ 305.475563][T15591] total_mapped_file 0 [ 305.479575][T15591] total_dirty 0 [ 305.483046][T15591] total_writeback 0 [ 305.486863][T15591] total_workingset_refault_anon 1649 [ 305.492225][T15591] total_workingset_refault_file 17 [ 305.497383][T15591] total_swap 335872 [ 305.501288][T15591] total_swapcached 0 [ 305.505186][T15591] total_pgpgin 405098 [ 305.509206][T15591] total_pgpgout 405098 [ 305.513437][T15591] total_pgfault 385953 [ 305.517561][T15591] total_pgmajfault 197 [ 305.521733][T15591] total_inactive_anon 0 [ 305.525916][T15591] total_active_anon 0 [ 305.529936][T15591] total_inactive_file 0 [ 305.534161][T15591] total_active_file 0 [ 305.538183][T15591] total_unevictable 0 [ 305.542209][T15591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3874,pid=15591,uid=0 [ 305.557080][T15591] Memory cgroup out of memory: Killed process 15591 (syz.5.3874) total-vm:93620kB, anon-rss:936kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 305.926594][T15679] xt_hashlimit: max too large, truncated to 1048576 [ 306.308887][T15727] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 306.377815][T15741] __nla_validate_parse: 2 callbacks suppressed [ 306.377833][T15741] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3939'. [ 306.393688][T15741] gretap0: entered promiscuous mode [ 306.399831][T15741] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3939'. [ 306.408844][T15741] 0XD: renamed from gretap0 [ 306.415244][T15741] 0XD: left promiscuous mode [ 306.420183][T15741] 0XD: entered allmulticast mode [ 306.426125][T15741] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 306.579666][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3949'. [ 306.588838][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3949'. [ 306.623225][T15766] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.707399][T15776] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3955'. [ 306.743625][T15784] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 306.890161][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 306.899277][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 306.924746][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3973'. [ 306.933766][T15814] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3973'. [ 307.086192][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3990'. [ 307.668846][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 307.668859][ T29] audit: type=1326 audit(1749416063.524:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.707418][ T29] audit: type=1326 audit(1749416063.524:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.731044][ T29] audit: type=1326 audit(1749416063.524:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.754740][ T29] audit: type=1326 audit(1749416063.524:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.778461][ T29] audit: type=1326 audit(1749416063.524:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.802049][ T29] audit: type=1326 audit(1749416063.554:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.825669][ T29] audit: type=1326 audit(1749416063.554:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.849150][ T29] audit: type=1326 audit(1749416063.554:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.872693][ T29] audit: type=1326 audit(1749416063.554:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 307.949554][ T29] audit: type=1326 audit(1749416063.804:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.8.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6a81e929 code=0x7ffc0000 [ 308.441638][T16025] tipc: Enabling of bearer rejected, failed to enable media [ 308.777901][T16077] lo speed is unknown, defaulting to 1000 [ 308.785371][T16077] lo speed is unknown, defaulting to 1000 [ 308.890344][T16077] chnl_net:caif_netlink_parms(): no params data found [ 308.987171][T16077] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.994485][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.002870][T16077] bridge_slave_0: entered allmulticast mode [ 309.009755][T16077] bridge_slave_0: entered promiscuous mode [ 309.010126][T16115] netlink: 'syz.5.4111': attribute type 280 has an invalid length. [ 309.181131][T16139] netlink: 'syz.7.4122': attribute type 280 has an invalid length. [ 309.190826][T11400] $H (unregistering): Released all slaves [ 309.200282][T11400] bond0 (unregistering): Released all slaves [ 309.211689][T16077] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.218863][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.226708][T16077] bridge_slave_1: entered allmulticast mode [ 309.233737][T16077] bridge_slave_1: entered promiscuous mode [ 309.265036][T11400] tipc: Disabling bearer [ 309.270379][T11400] tipc: Left network mode [ 309.271975][T16077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.287592][T16077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.309504][T16077] team0: Port device team_slave_0 added [ 309.316271][T16077] team0: Port device team_slave_1 added [ 309.338296][T16077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.345462][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.371739][T16077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.383248][T16077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.390277][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.416470][T16077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.446254][T16077] hsr_slave_0: entered promiscuous mode [ 309.452819][T16077] hsr_slave_1: entered promiscuous mode [ 309.466872][T16077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.476856][T16077] Cannot create hsr debugfs directory [ 309.482824][T16161] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.522132][T16169] Cannot find add_set index 0 as target [ 309.622730][T16077] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 309.631580][T16077] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 309.640149][T16077] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 309.649147][T16077] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 309.669976][T16077] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.677151][T16077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.684575][T16077] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.691707][T16077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.719493][T16077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.736016][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.746770][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.761732][T16077] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.784573][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.791802][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.803747][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.810957][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.827093][T16077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.837646][T16077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.904855][T16077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.088963][T16077] veth0_vlan: entered promiscuous mode [ 310.100616][T16077] veth1_vlan: entered promiscuous mode [ 310.121262][T16077] veth0_macvtap: entered promiscuous mode [ 310.129906][T16077] veth1_macvtap: entered promiscuous mode [ 310.140273][T16077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.152296][T16077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.162219][T16077] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.171180][T16077] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.180059][T16077] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.181152][ T54] tipc: Subscription rejected, illegal request [ 310.188911][T16077] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.326623][T16279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.483804][T16292] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 310.543384][T16304] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.715177][T16336] random: crng reseeded on system resumption [ 310.724508][T16339] netlink: 'syz.5.4205': attribute type 3 has an invalid length. [ 311.019607][T16385] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 311.960619][T16470] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.966714][T16470] syzkaller1: linktype set to 780 [ 312.080147][T16483] loop9: detected capacity change from 0 to 1024 [ 312.088123][T16483] EXT4-fs: Ignoring removed orlov option [ 312.095011][T16483] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 312.118215][T16483] EXT4-fs mount: 4 callbacks suppressed [ 312.118231][T16483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.161144][T16483] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.4273: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 312.254818][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.409807][T16536] loop9: detected capacity change from 0 to 256 [ 312.423695][T16536] FAT-fs (loop9): Directory bread(block 64) failed [ 312.430998][T16536] FAT-fs (loop9): Directory bread(block 65) failed [ 312.438429][T16536] FAT-fs (loop9): Directory bread(block 66) failed [ 312.445914][T16536] FAT-fs (loop9): Directory bread(block 67) failed [ 312.453333][T16536] FAT-fs (loop9): Directory bread(block 68) failed [ 312.460224][T16536] FAT-fs (loop9): Directory bread(block 69) failed [ 312.466866][T16536] FAT-fs (loop9): Directory bread(block 70) failed [ 312.474203][T16536] FAT-fs (loop9): Directory bread(block 71) failed [ 312.488025][T16536] FAT-fs (loop9): Directory bread(block 72) failed [ 312.494623][T16536] FAT-fs (loop9): Directory bread(block 73) failed [ 312.727651][T16586] __nla_validate_parse: 12 callbacks suppressed [ 312.727669][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4321'. [ 312.742946][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4321'. [ 312.752774][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4321'. [ 312.841001][T16598] lo speed is unknown, defaulting to 1000 [ 312.847609][T16598] lo speed is unknown, defaulting to 1000 [ 312.943837][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 312.943856][ T29] audit: type=1400 audit(1749416068.794:14473): avc: denied { read } for pid=16600 comm="syz.6.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.355937][ T29] audit: type=1326 audit(1749416069.194:14474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.7.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 313.379963][ T29] audit: type=1326 audit(1749416069.194:14475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.7.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 313.403910][ T29] audit: type=1326 audit(1749416069.194:14476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.7.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 313.427539][ T29] audit: type=1326 audit(1749416069.194:14477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.7.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 313.451673][ T29] audit: type=1326 audit(1749416069.194:14478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.7.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 313.482042][T16631] 9pnet_fd: Insufficient options for proto=fd [ 313.619757][ T29] audit: type=1326 audit(1749416069.384:14479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.9.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 313.643489][ T29] audit: type=1326 audit(1749416069.384:14480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.9.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 313.667118][ T29] audit: type=1326 audit(1749416069.384:14481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.9.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 313.690978][ T29] audit: type=1326 audit(1749416069.384:14482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16633 comm="syz.9.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 313.743751][T16642] lo: entered promiscuous mode [ 313.749592][T16642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.860532][T16654] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4354'. [ 314.616581][T16748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 314.665299][T16750] lo speed is unknown, defaulting to 1000 [ 314.688006][T16750] lo speed is unknown, defaulting to 1000 [ 315.221859][T16809] 9pnet_fd: Insufficient options for proto=fd [ 315.304600][T16822] loop9: detected capacity change from 0 to 8192 [ 315.366655][T16828] loop9: detected capacity change from 0 to 128 [ 316.288716][T16909] 9pnet_fd: Insufficient options for proto=fd [ 316.445639][T16930] loop9: detected capacity change from 0 to 128 [ 316.479934][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4486'. [ 316.573302][T16952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4492'. [ 316.593380][T16949] loop9: detected capacity change from 0 to 8192 [ 316.936010][T16997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.042085][T17014] lo speed is unknown, defaulting to 1000 [ 317.048842][T17014] lo speed is unknown, defaulting to 1000 [ 317.065485][T17029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4528'. [ 317.065861][T17030] netlink: 'syz.7.4526': attribute type 7 has an invalid length. [ 317.074605][T17029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4528'. [ 317.178207][T17014] chnl_net:caif_netlink_parms(): no params data found [ 317.235942][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.243105][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.250502][T17014] bridge_slave_0: entered allmulticast mode [ 317.256964][T17014] bridge_slave_0: entered promiscuous mode [ 317.264151][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.271261][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.287180][T17014] bridge_slave_1: entered allmulticast mode [ 317.294769][T17014] bridge_slave_1: entered promiscuous mode [ 317.331084][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.346523][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4542'. [ 317.346938][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.384014][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4546'. [ 317.401162][T17014] team0: Port device team_slave_0 added [ 317.439254][T17014] team0: Port device team_slave_1 added [ 317.457871][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.464861][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.491015][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.504183][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.511319][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.537748][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.574679][T17014] hsr_slave_0: entered promiscuous mode [ 317.599824][T17014] hsr_slave_1: entered promiscuous mode [ 317.607175][T17014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.615111][T17014] Cannot create hsr debugfs directory [ 317.888547][T17134] loop9: detected capacity change from 0 to 512 [ 317.923037][T17134] EXT4-fs: Ignoring removed orlov option [ 317.943799][T17134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.955880][T17014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.964589][T17134] EXT4-fs (loop9): orphan cleanup on readonly fs [ 317.973863][T17014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.986811][T17134] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4571: bg 0: block 248: padding at end of block bitmap is not set [ 318.003179][T17014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.010416][T17134] __quota_error: 216 callbacks suppressed [ 318.010431][T17134] Quota error (device loop9): write_blk: dquota write failed [ 318.019584][T17014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.023705][T17134] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 318.041009][T17134] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4571: Failed to acquire dquot type 1 [ 318.044450][T17147] __nla_validate_parse: 2 callbacks suppressed [ 318.044464][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4576'. [ 318.059906][T17134] EXT4-fs (loop9): 1 truncate cleaned up [ 318.080040][T17134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.104308][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.111527][T17014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.118868][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.125947][T17014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.133905][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.166434][ T29] audit: type=1326 audit(1749416074.014:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.6.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 318.171431][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.196442][ T29] audit: type=1326 audit(1749416074.014:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.6.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 318.222048][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.234108][ T29] audit: type=1326 audit(1749416074.054:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.6.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 318.239480][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.257989][ T29] audit: type=1326 audit(1749416074.054:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.6.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 318.288758][ T29] audit: type=1326 audit(1749416074.054:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.6.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 318.342757][T17168] netlink: 'syz.9.4583': attribute type 1 has an invalid length. [ 318.358827][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.381931][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.389092][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.401390][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.408515][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.422087][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4587'. [ 318.484282][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4590'. [ 318.509692][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4590'. [ 318.524119][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.665364][ T29] audit: type=1326 audit(1749416074.514:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.9.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 318.689127][ T29] audit: type=1326 audit(1749416074.514:14705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.9.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 318.720303][ T29] audit: type=1326 audit(1749416074.574:14706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.9.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 318.760670][T17223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.772956][T17014] veth0_vlan: entered promiscuous mode [ 318.794907][T17014] veth1_vlan: entered promiscuous mode [ 318.800772][T17226] openvswitch: netlink: Message has 6 unknown bytes. [ 318.861923][T17014] veth0_macvtap: entered promiscuous mode [ 318.882109][T17014] veth1_macvtap: entered promiscuous mode [ 318.914645][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.930615][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.940521][T17014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.949381][T17014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.958285][T17014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.967031][T17014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.121705][T17264] netlink: 'syz.6.4619': attribute type 1 has an invalid length. [ 319.143193][T17271] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 319.163452][T17271] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 319.633248][T17331] loop4: detected capacity change from 0 to 1024 [ 319.643880][T17331] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.655815][T17331] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 319.666951][T17331] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 319.697156][T17331] JBD2: no valid journal superblock found [ 319.703224][T17331] EXT4-fs (loop4): Could not load journal inode [ 319.857042][T17356] loop4: detected capacity change from 0 to 512 [ 319.866003][T17356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4661: bg 0: block 5: invalid block bitmap [ 319.878960][T17356] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 319.890396][T17356] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4661: invalid indirect mapped block 3 (level 2) [ 319.904397][T17356] EXT4-fs (loop4): 2 truncates cleaned up [ 319.912020][T17356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.943626][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.232756][T17402] bond1: entered promiscuous mode [ 320.237968][T17402] bond1: entered allmulticast mode [ 320.254216][T17402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.269436][T17402] bond1 (unregistering): Released all slaves [ 320.353007][T17426] netlink: 268 bytes leftover after parsing attributes in process `syz.9.4693'. [ 320.430531][T17441] pimreg: entered allmulticast mode [ 320.436615][T17441] pimreg: left allmulticast mode [ 320.731059][T17491] devpts: Unknown parameter '4 n{냜AP}Xxs{C_q4(g$Įl䞼ЪCJױjW [ 320.731059][T17491] Ět@Ma\ZFHҿ* !: rejected, failed to enable media [ 321.321168][T17578] EXT4-fs: Ignoring removed orlov option [ 321.335401][T17576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.348087][T17578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.357020][T17576] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.368870][T17578] EXT4-fs (loop9): orphan cleanup on readonly fs [ 321.377087][T17578] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4764: bg 0: block 248: padding at end of block bitmap is not set [ 321.410907][T17578] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4764: Failed to acquire dquot type 1 [ 321.426386][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.437754][T17578] EXT4-fs (loop9): 1 truncate cleaned up [ 321.450124][T17578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.503207][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.603299][T17612] loop4: detected capacity change from 0 to 256 [ 321.620972][T17612] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 321.669007][T17618] loop4: detected capacity change from 0 to 2048 [ 321.679860][T17618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.708419][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.764508][T17635] Invalid ELF header magic: != ELF [ 321.928543][T17656] netlink: 'syz.7.4797': attribute type 3 has an invalid length. [ 321.970873][T17668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.002428][T17675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4806'. [ 322.229609][T17720] 9pnet_fd: Insufficient options for proto=fd [ 322.593309][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4862'. [ 322.603860][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4862'. [ 322.614613][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4862'. [ 322.624220][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4862'. [ 322.733801][T17806] loop4: detected capacity change from 0 to 512 [ 322.750346][T17806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.763528][T17809] loop9: detected capacity change from 0 to 2048 [ 322.765498][T17806] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.789175][T17809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.820509][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.878229][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.033814][T17853] xt_CONNSECMARK: invalid mode: 0 [ 323.071762][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 323.071840][ T29] audit: type=1400 audit(1749416079.932:15107): avc: denied { read write } for pid=17860 comm="ex" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 323.112327][ T29] audit: type=1400 audit(1749416079.932:15108): avc: denied { open } for pid=17860 comm="ex" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 323.149885][T17865] loop4: detected capacity change from 0 to 1024 [ 323.157148][T17865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.160150][T17858] __nla_validate_parse: 2 callbacks suppressed [ 323.160166][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4892'. [ 323.180678][ T29] audit: type=1400 audit(1749416080.032:15109): avc: denied { setcheckreqprot } for pid=17864 comm="syz.9.4895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 323.204153][T17865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.237066][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.336662][ T41] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 323.372467][ T29] audit: type=1326 audit(1749416080.232:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 323.412811][ T29] audit: type=1326 audit(1749416080.232:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 323.436778][ T29] audit: type=1326 audit(1749416080.232:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 323.460542][ T29] audit: type=1326 audit(1749416080.232:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 323.484357][ T29] audit: type=1326 audit(1749416080.262:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 323.510384][ T29] audit: type=1401 audit(1749416080.302:15115): op=setxattr invalid_context="" [ 323.565691][T17920] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4917'. [ 323.593497][ T29] audit: type=1326 audit(1749416080.452:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236563e929 code=0x7ffc0000 [ 323.637168][ T4873] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 323.644968][ T4873] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 323.652767][ T4873] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 323.663116][ T4873] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 323.712859][T17938] loop4: detected capacity change from 0 to 512 [ 323.724960][T17938] EXT4-fs: Ignoring removed i_version option [ 323.732690][T17938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.751661][T17938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.769875][T17938] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.790278][T17938] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm +}[@: corrupted inode contents [ 323.813189][T17938] EXT4-fs (loop4): Remounting filesystem read-only [ 323.843568][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.899862][T17955] loop4: detected capacity change from 0 to 128 [ 324.203364][T17991] lo speed is unknown, defaulting to 1000 [ 324.209954][T17991] lo speed is unknown, defaulting to 1000 [ 324.445893][T18026] loop9: detected capacity change from 0 to 8192 [ 324.456455][T18026] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.631988][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4978'. [ 324.786073][T18097] loop9: detected capacity change from 0 to 1024 [ 324.799749][T18097] EXT4-fs: Ignoring removed bh option [ 324.805317][T18097] EXT4-fs: inline encryption not supported [ 324.811996][T18097] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.828046][T18097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 324.838770][T18097] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.4995: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.853685][T18097] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.4995: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.868422][T18097] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4995: Failed to acquire dquot type 0 [ 324.880368][T18097] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 324.892490][T18097] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.4995: mark_inode_dirty error [ 324.916567][T18097] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 324.931869][T18097] EXT4-fs (loop9): 1 orphan inode deleted [ 324.938997][T18097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.952829][ T12] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.974921][T18097] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #2: block 16: comm syz.9.4995: lblock 0 mapped to illegal pblock 16 (length 1) [ 324.976572][T18110] IPVS: Error connecting to the multicast addr [ 324.990358][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 325.035499][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.045126][T16077] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.064483][T16077] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 325.074994][T16077] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 325.098936][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5004'. [ 325.363658][T18164] lo speed is unknown, defaulting to 1000 [ 325.372092][T18164] lo speed is unknown, defaulting to 1000 [ 325.594880][T18184] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5036'. [ 325.649928][T18193] x_tables: duplicate underflow at hook 1 [ 325.757519][T18199] Falling back ldisc for ttyS3. [ 325.826916][ T6173] nci: nci_rx_work: unknown MT 0x5 [ 325.841298][T18213] loop4: detected capacity change from 0 to 8192 [ 325.858213][T18213] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.905135][T18221] x_tables: duplicate underflow at hook 1 [ 326.239895][T18268] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5069'. [ 326.610490][T18284] loop9: detected capacity change from 0 to 512 [ 326.617339][T18284] EXT4-fs: Ignoring removed bh option [ 326.629408][T18284] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.638751][T18284] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 326.651620][T18284] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 326.661585][T18284] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 326.673261][T18284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.707074][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.761740][T18298] lo speed is unknown, defaulting to 1000 [ 326.773045][T18298] lo speed is unknown, defaulting to 1000 [ 326.842933][T18312] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5090'. [ 326.852175][T18312] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 326.871189][T18318] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5093'. [ 327.050427][T18331] loop9: detected capacity change from 0 to 512 [ 327.061527][T18331] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.070646][T18331] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 327.092552][T18331] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 327.139678][T18331] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 327.169159][T18331] System zones: 0-2, 18-18, 34-35 [ 327.190129][T18331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.210634][T18346] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.259645][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.339261][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5113'. [ 327.370775][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5113'. [ 327.510559][T18380] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.525328][T18381] loop4: detected capacity change from 0 to 512 [ 327.562250][T18385] tmpfs: Bad value for 'mpol' [ 327.579714][T18381] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 327.620788][T18381] EXT4-fs (loop4): mount failed [ 327.933303][T18426] lo speed is unknown, defaulting to 1000 [ 327.942046][T18426] lo speed is unknown, defaulting to 1000 [ 328.103746][T18461] netlink: 'syz.5.5156': attribute type 21 has an invalid length. [ 328.133844][T18463] lo speed is unknown, defaulting to 1000 [ 328.140608][T18463] lo speed is unknown, defaulting to 1000 [ 328.229050][T18475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.275102][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 328.275116][ T29] audit: type=1326 audit(1749416085.132:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.306212][ T29] audit: type=1326 audit(1749416085.132:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.329957][ T29] audit: type=1326 audit(1749416085.132:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.353572][ T29] audit: type=1326 audit(1749416085.142:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.377361][ T29] audit: type=1326 audit(1749416085.142:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.400996][ T29] audit: type=1326 audit(1749416085.142:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.461511][ T29] audit: type=1326 audit(1749416085.162:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fface3fe963 code=0x7ffc0000 [ 328.485074][ T29] audit: type=1326 audit(1749416085.162:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fface3fe963 code=0x7ffc0000 [ 328.508843][ T29] audit: type=1326 audit(1749416085.162:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 328.532861][ T29] audit: type=1326 audit(1749416085.162:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 329.104897][T18557] lo speed is unknown, defaulting to 1000 [ 329.111399][T18557] lo speed is unknown, defaulting to 1000 [ 329.452225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a53f000: rx timeout, send abort [ 329.839757][T18603] loop9: detected capacity change from 0 to 512 [ 329.890539][T18603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.909439][T18603] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.952247][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a53fc00: rx timeout, send abort [ 329.961054][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a53f000: abort rx timeout. Force session deactivation [ 329.977734][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.042527][T18620] loop9: detected capacity change from 0 to 1024 [ 330.058256][T18620] EXT4-fs (loop9): filesystem is read-only [ 330.071740][T18620] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 330.085228][T18627] __nla_validate_parse: 3 callbacks suppressed [ 330.085247][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5230'. [ 330.100776][T18620] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 330.111448][T18620] EXT4-fs error (device loop9): ext4_get_journal_inode:5796: comm syz.9.5226: inode #1: comm syz.9.5226: iget: illegal inode # [ 330.134967][T18620] EXT4-fs (loop9): no journal found [ 330.140385][T18620] EXT4-fs (loop9): can't get journal size [ 330.152519][T18620] EXT4-fs (loop9): failed to initialize system zone (-22) [ 330.160343][T18620] EXT4-fs (loop9): mount failed [ 330.199242][T18640] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5234'. [ 330.209860][T18640] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5234'. [ 330.219051][T18640] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5234'. [ 330.254296][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 330.264443][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 330.274728][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 330.288614][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 330.299473][T18646] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.311572][T18646] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 330.323899][T18646] bridge_slave_0: default FDB implementation only supports local addresses [ 330.388277][T18652] netlink: 'syz.7.5239': attribute type 21 has an invalid length. [ 330.396279][T18652] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.460515][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a53fc00: abort rx timeout. Force session deactivation [ 330.699915][T18690] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.5257'. [ 330.778748][T18705] loop9: detected capacity change from 0 to 128 [ 330.786792][T18705] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.792960][T18707] veth0: entered promiscuous mode [ 330.805684][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5265'. [ 330.816301][T18707] veth0 (unregistering): left promiscuous mode [ 331.063424][T18722] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 331.158690][T18734] netlink: 'syz.6.5278': attribute type 10 has an invalid length. [ 331.301242][T18750] ip6tnl2: entered promiscuous mode [ 331.306513][T18750] ip6tnl2: entered allmulticast mode [ 331.324073][T18750] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 331.657444][ T12] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.858024][T18825] loop9: detected capacity change from 0 to 8192 [ 331.917658][T18838] uprobe: syz.9.5325:18838 failed to unregister, leaking uprobe [ 332.202725][T18877] loop9: detected capacity change from 0 to 7 [ 332.210227][T18877] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.218325][T18877] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.226244][T18877] loop9: unable to read partition table [ 332.233474][T18877] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 332.233474][T18877] ) failed (rc=-5) [ 332.426781][T18921] IPVS: Unknown mcast interface: vcan0 [ 333.136531][T19001] SELinux: Context is not valid (left unmapped). [ 333.382249][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 333.382270][ T29] audit: type=1326 audit(1749416090.242:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.414306][ T29] audit: type=1326 audit(1749416090.242:15644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.438089][ T29] audit: type=1326 audit(1749416090.242:15645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.462008][ T29] audit: type=1326 audit(1749416090.242:15646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.485672][ T29] audit: type=1326 audit(1749416090.242:15647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.509467][ T29] audit: type=1326 audit(1749416090.242:15648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.533138][ T29] audit: type=1326 audit(1749416090.242:15649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.556875][ T29] audit: type=1326 audit(1749416090.242:15650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.580605][ T29] audit: type=1326 audit(1749416090.252:15651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.604342][ T29] audit: type=1326 audit(1749416090.252:15652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19038 comm="syz.4.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 333.855622][T19072] xt_bpf: check failed: parse error [ 334.158382][T19101] loop9: detected capacity change from 0 to 256 [ 334.172501][T19101] FAT-fs (loop9): Directory bread(block 64) failed [ 334.180506][T19101] FAT-fs (loop9): Directory bread(block 65) failed [ 334.192685][T19101] FAT-fs (loop9): Directory bread(block 66) failed [ 334.199440][T19101] FAT-fs (loop9): Directory bread(block 67) failed [ 334.206236][T19101] FAT-fs (loop9): Directory bread(block 68) failed [ 334.213976][T19101] FAT-fs (loop9): Directory bread(block 69) failed [ 334.220807][T19101] FAT-fs (loop9): Directory bread(block 70) failed [ 334.227571][T19101] FAT-fs (loop9): Directory bread(block 71) failed [ 334.242058][T19101] FAT-fs (loop9): Directory bread(block 72) failed [ 334.249889][T19101] FAT-fs (loop9): Directory bread(block 73) failed [ 334.815091][T19153] No source specified [ 334.851756][T19173] loop4: detected capacity change from 0 to 512 [ 334.859049][T19173] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.868357][T19173] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 334.896312][T19173] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 334.921810][T19173] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 334.931460][T19173] System zones: 0-2, 18-18, 34-35 [ 334.941948][T19173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.983826][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.254199][T19222] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 335.276172][T19224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.295363][T19224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.379165][T19234] loop4: detected capacity change from 0 to 8192 [ 335.549842][T19254] __nla_validate_parse: 14 callbacks suppressed [ 335.549861][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5526'. [ 335.570280][T19254] bridge0: port 1(batadv1) entered blocking state [ 335.576764][T19254] bridge0: port 1(batadv1) entered disabled state [ 335.583460][T19254] batadv1: entered allmulticast mode [ 335.593066][T19254] batadv1: entered promiscuous mode [ 336.087829][ T2134] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 336.097303][ T2134] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 336.304968][T19323] lo speed is unknown, defaulting to 1000 [ 336.318910][T19323] lo speed is unknown, defaulting to 1000 [ 336.393407][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5559'. [ 336.414906][T19335] loop4: detected capacity change from 0 to 512 [ 336.430719][T19335] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 336.442613][T19335] EXT4-fs (loop4): 1 truncate cleaned up [ 336.453925][T19335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.508638][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.560170][T19352] netlink: 'syz.4.5565': attribute type 21 has an invalid length. [ 336.577638][T19352] netlink: 'syz.4.5565': attribute type 1 has an invalid length. [ 336.585419][T19352] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5565'. [ 336.615853][T19354] lo speed is unknown, defaulting to 1000 [ 336.623460][T19354] lo speed is unknown, defaulting to 1000 [ 336.803984][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5577'. [ 336.993374][T19404] loop4: detected capacity change from 0 to 1024 [ 337.030807][T19406] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5592'. [ 337.105046][T19408] SELinux: failed to load policy [ 337.141248][T19415] loop4: detected capacity change from 0 to 2048 [ 337.146037][T19420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19420 comm=syz.9.5598 [ 337.160649][T19420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19420 comm=syz.9.5598 [ 337.206490][T19424] loop9: detected capacity change from 0 to 1024 [ 337.210651][T19415] Alternate GPT is invalid, using primary GPT. [ 337.219389][T19415] loop4: p1 p2 p3 [ 337.234779][T19424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.294994][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.332319][T19439] wg2: entered promiscuous mode [ 337.337338][T19439] wg2: entered allmulticast mode [ 337.346609][T19442] loop9: detected capacity change from 0 to 2048 [ 337.373710][T19442] No source specified [ 337.450577][T19454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.463382][T19454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.002448][T19488] loop4: detected capacity change from 0 to 2048 [ 338.015366][T19488] No source specified [ 338.236456][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5641'. [ 338.250654][T19517] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.257919][T19517] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.351060][T19536] lo speed is unknown, defaulting to 1000 [ 338.357075][T19536] lo speed is unknown, defaulting to 1000 [ 338.375349][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5661'. [ 338.392816][T19538] loop9: detected capacity change from 0 to 2048 [ 338.440195][T19538] Alternate GPT is invalid, using primary GPT. [ 338.446537][T19538] loop9: p1 p2 p3 [ 338.524745][T19556] netlink: 'syz.9.5658': attribute type 1 has an invalid length. [ 338.532705][T19556] netlink: 'syz.9.5658': attribute type 4 has an invalid length. [ 338.540480][T19556] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.5658'. [ 338.579104][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 338.579122][ T29] audit: type=1326 audit(1749416095.442:16129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.7.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 338.609527][ T29] audit: type=1326 audit(1749416095.442:16130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.7.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 338.633243][ T29] audit: type=1326 audit(1749416095.442:16131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.7.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 338.656970][ T29] audit: type=1326 audit(1749416095.442:16132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.7.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fface3fe929 code=0x7ffc0000 [ 338.730641][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5670'. [ 338.752517][ T29] audit: type=1326 audit(1749416095.612:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.780728][ T29] audit: type=1326 audit(1749416095.612:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.807251][ T29] audit: type=1326 audit(1749416095.642:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.831046][ T29] audit: type=1326 audit(1749416095.642:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.854780][ T29] audit: type=1326 audit(1749416095.642:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.878382][ T29] audit: type=1326 audit(1749416095.662:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19578 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb344e929 code=0x7ffc0000 [ 338.926017][T19583] veth0: entered promiscuous mode [ 338.939671][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5672'. [ 338.954801][T19583] veth0 (unregistering): left promiscuous mode [ 339.193822][T19611] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.225146][T19618] loop9: detected capacity change from 0 to 256 [ 339.252674][T19624] veth0: entered promiscuous mode [ 339.367884][T19637] SELinux: failed to load policy [ 339.666311][T19659] loop4: detected capacity change from 0 to 128 [ 339.681197][T19659] bio_check_eod: 212 callbacks suppressed [ 339.681210][T19659] syz.4.5708: attempt to access beyond end of device [ 339.681210][T19659] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 339.700645][T19659] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 339.709944][T19659] syz.4.5708: attempt to access beyond end of device [ 339.709944][T19659] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 339.723702][T19659] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 339.734572][T19659] syz.4.5708: attempt to access beyond end of device [ 339.734572][T19659] loop4: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 339.748139][T19659] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 339.759338][T19659] syz.4.5708: attempt to access beyond end of device [ 339.759338][T19659] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 339.769259][T19665] netlink: 'syz.7.5711': attribute type 13 has an invalid length. [ 339.772881][T19659] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 339.780745][T19665] netlink: 'syz.7.5711': attribute type 27 has an invalid length. [ 339.790928][T19659] syz.4.5708: attempt to access beyond end of device [ 339.790928][T19659] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 339.810758][T19659] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 339.817994][T19667] veth0: entered promiscuous mode [ 339.833117][T19667] veth0 (unregistering): left promiscuous mode [ 340.242947][T19716] IPVS: persistence engine module ip_vs_pe_ not found [ 340.624449][T19766] __nla_validate_parse: 5 callbacks suppressed [ 340.624466][T19766] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5769'. [ 340.817363][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5768'. [ 340.926465][T19792] loop4: detected capacity change from 0 to 1764 [ 340.934994][T19792] iso9660: Unknown parameter '' [ 341.053638][T19810] Cannot find add_set index 0 as target [ 341.129325][T19819] Cannot find del_set index 0 as target [ 341.408446][T19840] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 341.573781][T19847] loop9: detected capacity change from 0 to 1024 [ 341.600485][T19847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.614361][T19847] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.736145][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.928052][T19855] bridge0: port 1(macvlan0) entered blocking state [ 341.936680][T19855] bridge0: port 1(macvlan0) entered disabled state [ 341.947576][T19855] macvlan0: entered allmulticast mode [ 341.954376][T19855] bridge0: entered allmulticast mode [ 341.964205][T19896] Cannot find add_set index 0 as target [ 341.983442][T19855] macvlan0: left allmulticast mode [ 341.990872][T19855] bridge0: left allmulticast mode [ 342.032853][T19899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.143447][T19916] loop4: detected capacity change from 0 to 128 [ 342.152327][T19916] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.164990][T19916] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.185214][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5829'. [ 342.195067][T17014] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.212395][T19924] loop4: detected capacity change from 0 to 512 [ 342.228664][T19924] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.243641][T19924] EXT4-fs (loop4): mount failed [ 342.909684][T19942] bridge0: entered promiscuous mode [ 342.993887][T19942] bridge0: port 3(macvlan2) entered blocking state [ 343.007537][T19942] bridge0: port 3(macvlan2) entered disabled state [ 343.020202][T19942] macvlan2: entered allmulticast mode [ 343.026331][T19942] bridge0: entered allmulticast mode [ 343.042602][T19942] macvlan2: left allmulticast mode [ 343.050557][T19942] bridge0: left allmulticast mode [ 343.066686][T19942] bridge0: left promiscuous mode [ 343.243837][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5861'. [ 343.329104][T20000] loop4: detected capacity change from 0 to 128 [ 343.345660][T20000] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 550) [ 343.353857][T20000] FAT-fs (loop4): Filesystem has been set read-only [ 343.380027][T17014] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 550) [ 343.491504][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.500756][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.531633][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.540718][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.572735][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.581901][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 343.594459][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 343.594477][ T29] audit: type=1400 audit(1749416100.452:16437): avc: denied { write } for pid=20032 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.766702][ T29] audit: type=1400 audit(1749416100.622:16438): avc: denied { create } for pid=20053 comm="syz.4.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.787269][ T29] audit: type=1400 audit(1749416100.632:16439): avc: denied { write } for pid=20053 comm="syz.4.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.807751][ T29] audit: type=1400 audit(1749416100.632:16440): avc: denied { nlmsg_write } for pid=20053 comm="syz.4.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.841342][ T29] audit: type=1400 audit(1749416100.702:16441): avc: denied { execute } for pid=20055 comm="syz.4.5891" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=50871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.885557][ T29] audit: type=1400 audit(1749416100.742:16442): avc: denied { write } for pid=20057 comm="syz.4.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 343.906357][ T29] audit: type=1400 audit(1749416100.742:16443): avc: denied { name_connect } for pid=20057 comm="syz.4.5892" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 343.952478][ T29] audit: type=1400 audit(1749416100.812:16444): avc: denied { create } for pid=20061 comm="syz.5.5894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 343.973342][ T29] audit: type=1400 audit(1749416100.812:16445): avc: denied { setopt } for pid=20061 comm="syz.5.5894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 343.996745][ T29] audit: type=1400 audit(1749416100.852:16446): avc: denied { execute_no_trans } for pid=20063 comm="syz.4.5895" path="/284/file1" dev="tmpfs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 344.099126][T20079] loop4: detected capacity change from 0 to 512 [ 344.106758][T20079] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 344.120239][T20079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e11c, mo2=0102] [ 344.129365][T20079] EXT4-fs (loop4): orphan cleanup on readonly fs [ 344.136277][T20079] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.5902: attempt to clear invalid blocks 1024 len 1 [ 344.149986][T20079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5902: bg 0: block 361: padding at end of block bitmap is not set [ 344.164681][T20079] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 344.173660][T20079] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5902: invalid indirect mapped block 1811939328 (level 0) [ 344.187986][T20079] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5902: invalid indirect mapped block 2185560079 (level 1) [ 344.203018][T20079] EXT4-fs (loop4): 1 truncate cleaned up [ 344.209196][T20079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 344.233710][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 344.307417][T20103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.534090][T20136] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 345.311309][T20215] pimreg: entered allmulticast mode [ 345.328957][T20215] pimreg: left allmulticast mode [ 345.345401][T20203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.382174][T20224] loop9: detected capacity change from 0 to 512 [ 345.403213][T20224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.421903][T20224] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.436622][T20230] loop4: detected capacity change from 0 to 512 [ 345.450189][T20230] EXT4-fs (loop4): 1 orphan inode deleted [ 345.456844][T20230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.471303][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 345.487391][T20230] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.506121][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.534282][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.697074][T20277] loop9: detected capacity change from 0 to 1024 [ 345.709492][T20277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.734091][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.955995][T20316] loop4: detected capacity change from 0 to 512 [ 345.963361][T20316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.976402][T20316] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.6000: bad orphan inode 17 [ 345.993450][T20316] EXT4-fs (loop4): Remounting filesystem read-only [ 346.000119][T20316] ext4_test_bit(bit=16, block=4) = 1 [ 346.005428][T20316] is_bad_inode(inode)=0 [ 346.009695][T20316] NEXT_ORPHAN(inode)=2147418128 [ 346.014651][T20316] max_ino=32 [ 346.017895][T20316] i_nlink=0 [ 346.046921][T20316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.086095][T20325] lo speed is unknown, defaulting to 1000 [ 346.104453][T20325] lo speed is unknown, defaulting to 1000 [ 346.192163][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.223092][T20336] __nla_validate_parse: 4 callbacks suppressed [ 346.223158][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6012'. [ 346.247969][T20336] bridge0: port 2(macvlan0) entered blocking state [ 346.254585][T20336] bridge0: port 2(macvlan0) entered disabled state [ 346.261463][T20336] macvlan0: entered allmulticast mode [ 346.266990][T20336] bridge0: entered allmulticast mode [ 346.273556][T20336] macvlan0: left allmulticast mode [ 346.278839][T20336] bridge0: left allmulticast mode [ 346.324931][T20350] loop4: detected capacity change from 0 to 512 [ 346.325589][T20352] sctp: [Deprecated]: syz.7.6018 (pid 20352) Use of int in max_burst socket option. [ 346.325589][T20352] Use struct sctp_assoc_value instead [ 346.348946][T20350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.372772][T20350] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.404178][T20350] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.6017: corrupted inode contents [ 346.417271][T20350] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.6017: mark_inode_dirty error [ 346.438371][T20350] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.6017: corrupted inode contents [ 346.458672][T20350] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.6017: mark_inode_dirty error [ 346.484578][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.510249][T20367] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 346.730229][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 346.801235][T20416] netlink: 'syz.6.6044': attribute type 10 has an invalid length. [ 346.829951][T20418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.091357][T20435] loop9: detected capacity change from 0 to 512 [ 347.105908][T20435] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.6053: corrupted in-inode xattr: invalid ea_ino [ 347.157751][T20435] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.6053: couldn't read orphan inode 15 (err -117) [ 347.183389][T20435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.273254][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.653557][T20480] loop4: detected capacity change from 0 to 1024 [ 347.684994][T20484] veth0: entered promiscuous mode [ 347.693840][T20480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.709936][T20484] veth0: left promiscuous mode [ 347.723425][T20480] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 347.768410][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.860523][T20509] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 347.870927][T20511] loop4: detected capacity change from 0 to 512 [ 347.892107][T20511] journal_path: Lookup failure for './file0/../file0' [ 347.899166][T20511] EXT4-fs: error: could not find journal device path [ 347.966915][T20515] SELinux: Context : is not valid (left unmapped). [ 347.979428][T20520] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 348.267827][T20552] loop4: detected capacity change from 0 to 8192 [ 348.273052][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6102'. [ 348.499378][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6120'. [ 348.524942][T20591] SELinux: failed to load policy [ 348.610925][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 348.610944][ T29] audit: type=1326 audit(1749416105.472:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.9.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 348.647665][ T29] audit: type=1326 audit(1749416105.472:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.9.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 348.671426][ T29] audit: type=1400 audit(1749416105.472:16745): avc: denied { unmount } for pid=17014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 348.691723][ T29] audit: type=1326 audit(1749416105.502:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.9.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 348.715753][ T29] audit: type=1326 audit(1749416105.502:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.9.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 348.739407][ T29] audit: type=1326 audit(1749416105.502:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.9.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1a1226e929 code=0x7ffc0000 [ 348.828031][T20633] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6135'. [ 348.951621][ T29] audit: type=1400 audit(1749416105.812:16749): avc: denied { connect } for pid=20643 comm="syz.7.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.991797][ T29] audit: type=1400 audit(1749416105.852:16750): avc: denied { create } for pid=20649 comm="syz.6.6143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.015786][ T29] audit: type=1400 audit(1749416105.872:16751): avc: denied { mounton } for pid=20649 comm="syz.6.6143" path="/1259/file0" dev="tmpfs" ino=6582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.039294][ T29] audit: type=1400 audit(1749416105.872:16752): avc: denied { mount } for pid=20649 comm="syz.6.6143" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 349.178282][T20675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 349.370713][T20698] loop4: detected capacity change from 0 to 128 [ 349.431250][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6168'. [ 349.461724][T20711] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 349.488610][T20716] loop9: detected capacity change from 0 to 512 [ 349.499863][T20716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.514286][T20716] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.543579][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.769680][T20750] loop4: detected capacity change from 0 to 512 [ 349.776804][T20750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.791806][T20750] EXT4-fs error (device loop4): __ext4_iget:5379: inode #11: block 5: comm syz.4.6185: invalid block [ 349.812607][T20750] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6185: couldn't read orphan inode 11 (err -117) [ 349.825506][T20750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.874433][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.911295][T20770] netlink: 'syz.4.6193': attribute type 1 has an invalid length. [ 349.919126][T20770] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6193'. [ 349.942077][T20762] SELinux: failed to load policy [ 350.199295][T20824] loop4: detected capacity change from 0 to 1024 [ 350.206431][T20824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.216964][T20824] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.229062][T20824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 350.246908][T20824] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6218: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.261483][T20824] EXT4-fs (loop4): Remounting filesystem read-only [ 350.268743][T20824] EXT4-fs (loop4): 1 orphan inode deleted [ 350.276673][T20824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.290723][T20824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.332925][T20824] loop4: detected capacity change from 0 to 512 [ 350.351348][T20824] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6218: Failed to acquire dquot type 1 [ 350.358619][T20850] loop9: detected capacity change from 0 to 1024 [ 350.373286][T20824] EXT4-fs (loop4): 1 truncate cleaned up [ 350.382469][T20850] EXT4-fs: Ignoring removed bh option [ 350.384941][T20824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.388119][T20850] EXT4-fs: inline encryption not supported [ 350.404666][T20824] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.414655][T20850] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.419589][T20824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.439136][T20850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 350.453785][T20850] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6230: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.472599][T20850] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6230: lblock 0 mapped to illegal pblock 48 (length 1) [ 350.486990][T20850] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6230: Failed to acquire dquot type 0 [ 350.502105][T20850] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 350.513451][T20850] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6230: mark_inode_dirty error [ 350.526206][T20850] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 350.537058][T20850] EXT4-fs (loop9): 1 orphan inode deleted [ 350.543407][T20850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.559986][ T3437] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.574998][ T3437] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 350.609607][T20871] tipc: New replicast peer: 255.255.255.255 [ 350.615744][T20871] tipc: Enabled bearer , priority 10 [ 350.632750][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.645394][T16077] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 350.666690][T16077] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 350.683807][T16077] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 350.711083][T20883] loop9: detected capacity change from 0 to 512 [ 350.730558][T20883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.749941][T20883] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.771000][T20883] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 350.810919][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.022387][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6266'. [ 351.066163][T20944] pim6reg1: entered promiscuous mode [ 351.071704][T20944] pim6reg1: entered allmulticast mode [ 351.532101][T20994] netlink: 'syz.4.6291': attribute type 4 has an invalid length. [ 351.559828][T20994] netlink: 'syz.4.6291': attribute type 4 has an invalid length. [ 351.727434][ T1040] tipc: Node number set to 1804558849 [ 351.769947][T21027] lo speed is unknown, defaulting to 1000 [ 351.775912][T21027] lo speed is unknown, defaulting to 1000 [ 352.064790][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6325'. [ 352.074072][T21077] loop9: detected capacity change from 0 to 512 [ 352.120349][T21077] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 352.146081][T21077] EXT4-fs (loop9): mount failed [ 352.207089][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6333'. [ 352.254748][T21104] netlink: 'syz.6.6337': attribute type 12 has an invalid length. [ 352.369736][T21124] loop9: detected capacity change from 0 to 512 [ 352.378365][T21124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.398472][T21124] EXT4-fs (loop9): orphan cleanup on readonly fs [ 352.405704][T21124] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 352.421534][T21124] EXT4-fs (loop9): 1 truncate cleaned up [ 352.433954][T21124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.460425][T16077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.640391][T21154] loop4: detected capacity change from 0 to 128 [ 352.647957][T21154] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 352.660214][T21154] syz.4.6360: attempt to access beyond end of device [ 352.660214][T21154] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 352.720515][T21166] loop9: detected capacity change from 0 to 128 [ 352.800697][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6373'. [ 352.971940][ T3437] kworker/u8:7: attempt to access beyond end of device [ 352.971940][ T3437] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 353.000518][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.000518][ T3437] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 353.030833][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.030833][ T3437] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 353.062670][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.062670][ T3437] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 353.085254][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.085254][ T3437] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 353.104646][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.104646][ T3437] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 353.141673][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.141673][ T3437] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 353.155169][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.155169][ T3437] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 353.169291][ T3437] kworker/u8:7: attempt to access beyond end of device [ 353.169291][ T3437] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 353.190496][T21215] loop4: detected capacity change from 0 to 512 [ 353.197910][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6388'. [ 353.207691][T21215] EXT4-fs: Ignoring removed bh option [ 353.217545][T21215] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 353.226666][T21215] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 353.249944][T21215] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 353.261893][T21215] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 353.270783][T21215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.328720][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.409824][T21246] loop4: detected capacity change from 0 to 164 [ 353.428180][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6401'. [ 353.439597][T21246] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 353.739863][T21294] loop4: detected capacity change from 0 to 512 [ 353.746918][T21294] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 353.761082][T21294] EXT4-fs (loop4): 1 truncate cleaned up [ 353.767348][T21294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.784016][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 353.784032][ T29] audit: type=1400 audit(1749416110.642:17070): avc: denied { block_suspend } for pid=21297 comm="syz.6.6414" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.816944][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.904866][ T29] audit: type=1400 audit(1749416110.752:17071): avc: denied { firmware_load } for pid=21305 comm="syz.4.6418" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 354.135977][ T29] audit: type=1326 audit(1749416110.992:17072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.167553][ T29] audit: type=1326 audit(1749416111.022:17073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.191270][ T29] audit: type=1326 audit(1749416111.022:17074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.214892][ T29] audit: type=1326 audit(1749416111.022:17075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.238625][ T29] audit: type=1326 audit(1749416111.022:17076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.262213][ T29] audit: type=1326 audit(1749416111.022:17077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.286002][ T29] audit: type=1400 audit(1749416111.022:17078): avc: denied { kexec_image_load } for pid=21324 comm="syz.6.6424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 354.306292][ T29] audit: type=1326 audit(1749416111.022:17079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1daa6e929 code=0x7ffc0000 [ 354.479027][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6438'. [ 354.488808][T21355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6438'. [ 354.918953][T21410] delete_channel: no stack [ 355.065565][T21437] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 355.080947][T21439] ref_ctr increment failed for inode: 0x1931 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811a4ced40 [ 355.092390][T21438] uprobe: syz.5.6471:21438 failed to unregister, leaking uprobe [ 355.212778][T21452] bond3: entered promiscuous mode [ 355.218135][T21452] bond3: entered allmulticast mode [ 355.224796][T21452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.243835][T21452] bond3 (unregistering): Released all slaves [ 355.698751][T21504] sit0: entered allmulticast mode [ 355.754269][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6505'. [ 355.763351][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6505'. [ 355.800540][T21509] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.809395][T21509] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.818236][T21509] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.827064][T21509] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.838694][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6505'. [ 356.133660][T21539] ip6gre1: entered allmulticast mode [ 356.158152][T21541] loop4: detected capacity change from 0 to 1024 [ 356.168923][T21541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.190180][T17014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.150647][T21623] loop4: detected capacity change from 0 to 256 [ 357.543475][T21677] __nla_validate_parse: 2 callbacks suppressed [ 357.543496][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6577'. [ 357.554985][T21685] syzkaller0: entered promiscuous mode [ 357.564347][T21685] syzkaller0: entered allmulticast mode [ 357.729467][T21701] loop4: detected capacity change from 0 to 8192 [ 358.462781][ T3437] ================================================================== [ 358.470909][ T3437] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 358.479192][ T3437] [ 358.481525][ T3437] write to 0xffff88815abab0a6 of 2 bytes by task 21702 on cpu 1: [ 358.489256][ T3437] fat16_ent_put+0x28/0x60 [ 358.493689][ T3437] fat_ent_write+0x6c/0xe0 [ 358.498223][ T3437] fat_chain_add+0x15b/0x3f0 [ 358.502919][ T3437] fat_get_block+0x46c/0x5e0 [ 358.507527][ T3437] __block_write_begin_int+0x3fd/0xf90 [ 358.512994][ T3437] cont_write_begin+0x5fc/0x970 [ 358.517859][ T3437] fat_write_begin+0x4f/0xe0 [ 358.522470][ T3437] generic_perform_write+0x184/0x490 [ 358.527771][ T3437] __generic_file_write_iter+0x9e/0x120 [ 358.533333][ T3437] generic_file_write_iter+0x8d/0x2f0 [ 358.538715][ T3437] aio_write+0x2e5/0x410 [ 358.542983][ T3437] io_submit_one+0xacd/0x11d0 [ 358.547674][ T3437] __se_sys_io_submit+0xfb/0x280 [ 358.552629][ T3437] __x64_sys_io_submit+0x43/0x50 [ 358.557752][ T3437] x64_sys_call+0xfc4/0x2fb0 [ 358.562365][ T3437] do_syscall_64+0xd2/0x200 [ 358.566967][ T3437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.572872][ T3437] [ 358.575200][ T3437] read to 0xffff88815abab000 of 512 bytes by task 3437 on cpu 0: [ 358.582934][ T3437] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 358.588856][ T3437] generic_perform_write+0x2c2/0x490 [ 358.594152][ T3437] shmem_file_write_iter+0xc5/0xf0 [ 358.599273][ T3437] lo_rw_aio+0x6ea/0x7a0 [ 358.603525][ T3437] loop_process_work+0x52d/0xa60 [ 358.608479][ T3437] loop_workfn+0x31/0x40 [ 358.612734][ T3437] process_scheduled_works+0x4cb/0x9d0 [ 358.618389][ T3437] worker_thread+0x582/0x770 [ 358.622994][ T3437] kthread+0x486/0x510 [ 358.627242][ T3437] ret_from_fork+0xda/0x150 [ 358.631861][ T3437] ret_from_fork_asm+0x1a/0x30 [ 358.636641][ T3437] [ 358.638967][ T3437] Reported by Kernel Concurrency Sanitizer on: [ 358.645121][ T3437] CPU: 0 UID: 0 PID: 3437 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 358.657372][ T3437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.667517][ T3437] Workqueue: loop4 loop_workfn [ 358.672319][ T3437] ==================================================================