last executing test programs: 2m14.059036797s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 2m13.933189409s ago: executing program 4 (id=34): socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 2m13.90383528s ago: executing program 4 (id=35): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 2m13.768243433s ago: executing program 4 (id=38): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 2m13.729044314s ago: executing program 4 (id=39): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41100, 0x41}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m11.83129916s ago: executing program 4 (id=52): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m11.823343891s ago: executing program 32 (id=52): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1m50.591635478s ago: executing program 3 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x20800, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m50.119163767s ago: executing program 3 (id=344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x220}], 0x1, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14) 1m49.730681585s ago: executing program 3 (id=349): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1m49.561414568s ago: executing program 3 (id=350): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="a28a937ef131b24fff8aedaad416864571fe0fd201d55ef1df999b3921ea1677980dcf6ab6e9687afc522144a9db4302fbd3d0fae30c78c3daae9b1f0b1e07cd42b8e2cf721ab6d5f149e8acc3dd13", 0x4f}], 0x1}}], 0x1, 0x40004) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000006117410000000000a60700000083000095000000000000001845e13c49f307d5e3cbc8df496cad64a2fd9f9fa57fe8ecaddb2891a9d15d26c015f827927aa037d894b722f28af0e1d892943efe188f8bcd0b6a402369cb341454dc303fa40af72835dda97efb5a097562cf1d40026af9b654ed961036dbf48e9f033d63d25c54ab813b2942a0"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a601b41f0a2a4"], 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1m49.384409922s ago: executing program 3 (id=352): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) flistxattr(r3, &(0x7f00000006c0)=""/89, 0x59) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m49.014020159s ago: executing program 3 (id=359): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1m49.013496359s ago: executing program 33 (id=359): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 43.324372429s ago: executing program 0 (id=1294): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4000, 0x0, 0x0) 43.25722153s ago: executing program 0 (id=1296): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000400000000200000002000000005000000030000000000000e0300000000000000050000000000"], 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 43.196272852s ago: executing program 0 (id=1297): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 43.133370533s ago: executing program 0 (id=1298): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0xa720, 0xa88, 0x8406, 0x8, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x88000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) tgkill(r0, r0, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 42.810826169s ago: executing program 0 (id=1302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x7ffff088) sendmsg$inet6(r2, 0x0, 0x20000080) fcntl$setpipe(r2, 0x407, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 42.625194942s ago: executing program 0 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 42.533811094s ago: executing program 34 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.812015035s ago: executing program 7 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8c, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 2.212840926s ago: executing program 6 (id=1788): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.113102638s ago: executing program 6 (id=1779): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x8, 0x2}, 0x10}}, 0x0) 2.112904878s ago: executing program 5 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.071403939s ago: executing program 5 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) dup2(r4, r0) 2.057055039s ago: executing program 5 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 2.056615769s ago: executing program 6 (id=1794): syz_usbip_server_init(0x1) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 1.943878511s ago: executing program 7 (id=1783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x5c3, &(0x7f0000000440)={0x0, 0xacbc, 0x8, 0x3, 0x217}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x38fc, 0x6d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x200000000000000) 1.554361859s ago: executing program 2 (id=1784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='ifs_status\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2008042, &(0x7f0000000380)={[{@data_ordered}, {@sb}, {@nobh}]}, 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") newfstatat(0xffffffffffffff9c, &(0x7f00000086c0)='./file0\x00', 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigpending(0x0, 0x0) 1.553596399s ago: executing program 1 (id=1797): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x58) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000180)={0x2000101c}) epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0xeb, 0x0, 0x0) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.443031721s ago: executing program 6 (id=1785): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x28020480) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 1.442540941s ago: executing program 2 (id=1787): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.422411212s ago: executing program 2 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d370887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setuid(0xee01) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 1.255453285s ago: executing program 2 (id=1790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000e0000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) 1.254868235s ago: executing program 1 (id=1802): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0be9ffff000000000000000064846932de260d32b0829668028c1bbaefb8b070a12345de257136037eda03eb8f0967b4f853d5472fe487ba90d01a7e7e66fea4b1"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0x0) 1.149155847s ago: executing program 5 (id=1791): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) close(r2) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x60cd894) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xa) 1.094719108s ago: executing program 7 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5) r2 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.058248999s ago: executing program 7 (id=1793): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x8, 0x2}, 0x10}}, 0x0) 303.826024ms ago: executing program 5 (id=1795): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 303.167024ms ago: executing program 7 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 302.604824ms ago: executing program 1 (id=1796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 302.479303ms ago: executing program 6 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 302.231784ms ago: executing program 2 (id=1808): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x40000c5) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x22020400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000000540)={0x200, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, r3], 0x2}, 0x58) 269.906754ms ago: executing program 7 (id=1799): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r5, r4, 0x0, 0x3ffff) 76.114009ms ago: executing program 1 (id=1800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0xe, 0x1, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 70.142128ms ago: executing program 2 (id=1801): syz_usbip_server_init(0x1) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 685.41µs ago: executing program 1 (id=1803): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) r0 = msgget$private(0x0, 0xfffffffffffffffd) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0xc000000000, 0x80000000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(r0, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) munlockall() stat(0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 550.42µs ago: executing program 5 (id=1804): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) rename(0x0, &(0x7f0000000080)='./file2\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3M9rHGUfAPDvTJO2b5v33bzgQTwJFSvUTtJU7UmIeC4U+gfUsJmEkEk2ZDe1iQFbDx4EQUXwRy/6H3hRBC+l/4MieFPwIGhN40HwsLKT3a1ud9PYJl2onw/Mzvd5Zme+zzc7PGRgnw3gX+vJ1ksSMRYRFyKi0u5PI+JwGR2NuLrzvttbm9Xtrc1qEs3mxVtJ67Syr3OtpL0/HuUp8XhE3ByNOPXG3Xnr6xuLM0WRr7bbE42llYn6+sbphaWZ+Xw+X56anDx79oWp55+b3Lda337ts1/e+vLlrz8+t/THi7eenU1iuqw7eurYTzt/k9GY7ulfPohkQ9RsNpvDHgMAAPeWlv+dRoyU+0ocKiMAAADgUdI80gQAAAAeeUkMewQAAADAwep8D+D21ma1sz3M7x/8/FJEjN9ZW7zdzT9SriGOOFquTzi2nfxtZUKycxo8kKvXIuLGdJ/7P2nff/evd+V68oDXY//daM0/0/3mv7Q7/0Sf+Wek89sJD6gz/23fNf/dyX9owPx3YY85jqye/GZg/msRT4z0y5908ycD8r+yx/yfj333/aBjzU8jTkb//H/NtcvvQ0zMLRR5+7VvjhNfvH5qt/qPDcqf7F7/yh7r/+H61PyguaSV/5kTu3/+/fK37ol32uNII+Ld9r7Vfq8nx9M3Jz/arf7ZAfXf6/P/ZI/1f/Xmxo97fCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU0ogYiyTNunGaZlnE8Yh4LI6lRa3eODVXW1uebR2LGI/RdG6hyCcjorLTTlrtM2V8pz3V0z4bEf+PiPcr/ynbWbVWzA67eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqOR8RYJGkWEWlE/FZJ0ywb9qgAAACAfTc+7AEAAAAAB87zPwAAADz6PP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8GF8+dbW3N7a7Paas9eXl9brF0+PZvXF7OltWpWra2uZPO12nyRZ9Xa0r2uV9RqK+diee3KRCOvNybq6xuXlmpry41LC0sz8/mlfPShVAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/NVZuSZpFRFrGaZplEf+NiPEYTeYWinwyIv4XEd9WRo+02meGPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2XX19Y3GmKPJVgUAg6AbDnpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiG+vrG4kxR5Kv1YY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4Up/SiKitZ2sPDXWe/Rw8nul3EfEq9cvfnBlptFYPdPq/7Xb3/iw3T81jPEDAAAAvTrP6Z3neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL2qr28szhRFvnqAwbBrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7s+fAQAA//8gLc9Y") 0s ago: executing program 6 (id=1816): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000004c0)={{0x1, 0x2, 0xffffffff, 0x0, 0x3ff}, 0x5, 0x10000, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff1, 0xc621, 0x9, 0x26b}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r0, 0x0, 0x0, 0xffffffff80000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x8, 0x0, 0xa3, 0x7}, {0x9, 0x5, 0x0, 0x2, 0x400, 0x2, 0x8, 0x81}, {0x9, 0x5, 0x6, 0x3, 0x10, 0x7, 0x5, 0x7c}}}}}}]}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): 2: 0000000000014544 [ 83.300971][ T5890] R13: 00007fffcb2a67d0 R14: ffffffffffffffff R15: 00007fffcb2a67f0 [ 83.300991][ T5890] [ 83.300999][ T5890] memory: usage 307200kB, limit 307200kB, failcnt 343 [ 83.520263][ T5890] memory+swap: usage 307952kB, limit 9007199254740988kB, failcnt 0 [ 83.528175][ T5890] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 83.535598][ T5890] Memory cgroup stats for /syz2: [ 83.536185][ T5890] cache 0 [ 83.536292][ T5937] team0: Failed to send options change via netlink (err -105) [ 83.541145][ T5890] rss 0 [ 83.541153][ T5890] shmem 0 [ 83.544125][ T5937] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.551584][ T5890] mapped_file 0 [ 83.555282][ T5937] team0: Port device dummy0 removed [ 83.557255][ T5890] dirty 0 [ 83.557264][ T5890] writeback 0 [ 83.569028][ T5937] dummy0: entered promiscuous mode [ 83.569419][ T5890] workingset_refault_anon 1271 [ 83.569443][ T5890] workingset_refault_file 256 [ 83.575017][ T5937] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 83.577665][ T5890] swap 770048 [ 83.607530][ T5890] swapcached 0 [ 83.610894][ T5890] pgpgin 123357 [ 83.614332][ T5890] pgpgout 123355 [ 83.617875][ T5890] pgfault 114047 [ 83.621401][ T5890] pgmajfault 172 [ 83.624939][ T5890] inactive_anon 0 [ 83.628609][ T5890] active_anon 0 [ 83.632123][ T5890] inactive_file 0 [ 83.635882][ T5890] active_file 8192 [ 83.639660][ T5890] unevictable 0 [ 83.643105][ T5890] hierarchical_memory_limit 314572800 [ 83.648506][ T5890] hierarchical_memsw_limit 9223372036854771712 [ 83.654669][ T5890] total_cache 0 [ 83.658188][ T5890] total_rss 0 [ 83.661457][ T5890] total_shmem 0 [ 83.664905][ T5890] total_mapped_file 0 [ 83.668881][ T5890] total_dirty 0 [ 83.672323][ T5890] total_writeback 0 [ 83.676256][ T5890] total_workingset_refault_anon 1271 [ 83.681524][ T5890] total_workingset_refault_file 256 [ 83.686832][ T5890] total_swap 770048 [ 83.690692][ T5890] total_swapcached 0 [ 83.694563][ T5890] total_pgpgin 123357 [ 83.698547][ T5890] total_pgpgout 123355 [ 83.702595][ T5890] total_pgfault 114047 [ 83.706704][ T5890] total_pgmajfault 172 [ 83.710755][ T5890] total_inactive_anon 0 [ 83.714953][ T5890] total_active_anon 0 [ 83.718965][ T5890] total_inactive_file 0 [ 83.723104][ T5890] total_active_file 8192 [ 83.727357][ T5890] total_unevictable 0 [ 83.731317][ T5890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.726,pid=5890,uid=0 [ 83.745868][ T5890] Memory cgroup out of memory: Killed process 5890 (syz.2.726) total-vm:96004kB, anon-rss:1268kB, file-rss:22252kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 83.844854][ T5943] IPv6: Can't replace route, no match found [ 83.953976][ T5891] syz.2.726 (5891) used greatest stack depth: 7288 bytes left [ 84.029069][ T5956] loop0: detected capacity change from 0 to 512 [ 84.046251][ T5956] /dev/loop0: Can't open blockdev [ 84.063740][ T5960] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 84.072119][ T5960] netlink: '+}[@': attribute type 30 has an invalid length. [ 84.108195][ T5963] loop5: detected capacity change from 0 to 1024 [ 84.130492][ T272] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.150974][ T5963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.151395][ T272] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.187910][ T272] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.196826][ T4602] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.230912][ T5976] netlink: 'syz.2.756': attribute type 4 has an invalid length. [ 84.534629][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.073603][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 85.073615][ T29] audit: type=1400 audit(1758914977.265:1415): avc: denied { ioctl } for pid=6090 comm="syz.0.770" path="socket:[13238]" dev="sockfs" ino=13238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.124239][ T29] audit: type=1400 audit(1758914977.305:1416): avc: denied { bind } for pid=6090 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.377167][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'. [ 85.419867][ T6147] tipc: Started in network mode [ 85.424786][ T6147] tipc: Node identity ac14140f, cluster identity 4711 [ 85.432246][ T6147] tipc: New replicast peer: 255.255.255.83 [ 85.438228][ T6147] tipc: Enabled bearer , priority 10 [ 85.521662][ T6151] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 85.544528][ T6151] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 85.555433][ T6151] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.715735][ T29] audit: type=1326 audit(1758914977.915:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.5.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa9b86eec9 code=0x0 [ 86.229718][ T6232] syzkaller0: entered promiscuous mode [ 86.235275][ T6232] syzkaller0: entered allmulticast mode [ 86.435665][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.788'. [ 86.555234][ T9] tipc: Node number set to 2886997007 [ 86.697720][ T29] audit: type=1400 audit(1758914978.895:1418): avc: denied { load_policy } for pid=6310 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.729468][ T6311] SELinux: failed to load policy [ 86.989927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a47c800: rx timeout, send abort [ 86.998261][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a47c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.012613][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812c9b5600: rx timeout, send abort [ 87.020875][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812c9b5600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.907893][ T6327] loop0: detected capacity change from 0 to 512 [ 88.055216][ T6327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.820840][ T6327] EXT4-fs (loop0): 1 truncate cleaned up [ 88.826987][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.072288][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.127906][ T6342] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 89.136451][ T6342] netlink: '+}[@': attribute type 30 has an invalid length. [ 89.159619][ T4608] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.190725][ T29] audit: type=1400 audit(1758914981.365:1419): avc: denied { read } for pid=6343 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.190861][ T4608] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.228769][ T4608] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.250261][ T4608] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.269677][ T6348] loop0: detected capacity change from 0 to 512 [ 89.294844][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.808'. [ 89.308245][ T6348] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.807: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 89.329618][ T6348] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.807: Bad quota inode: 3, type: 0 [ 89.358526][ T6348] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 89.374173][ T6348] EXT4-fs (loop0): mount failed [ 89.475002][ T6356] netlink: 'syz.0.810': attribute type 4 has an invalid length. [ 89.483522][ T6356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.810'. [ 89.522534][ T6356] .`: renamed from bond0 (while UP) [ 89.531041][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 89.585140][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 89.605823][ T6365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.623162][ T6365] vlan2: entered allmulticast mode [ 89.628350][ T6365] bond3: entered allmulticast mode [ 89.645514][ T6354] loop5: detected capacity change from 0 to 128 [ 89.653390][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.6.814'. [ 89.689301][ T29] audit: type=1400 audit(1758914981.885:1420): avc: denied { write } for pid=3379 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15403 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.690376][ T6354] bio_check_eod: 4 callbacks suppressed [ 89.690392][ T6354] syz.5.809: attempt to access beyond end of device [ 89.690392][ T6354] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 89.781524][ T29] audit: type=1326 audit(1758914981.975:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 89.805125][ T29] audit: type=1326 audit(1758914981.975:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 89.828765][ T29] audit: type=1326 audit(1758914981.975:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 89.852193][ T29] audit: type=1326 audit(1758914981.975:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 89.954561][ T6389] loop5: detected capacity change from 0 to 128 [ 90.207081][ T6403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.266458][ T6403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.293542][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 90.293555][ T29] audit: type=1400 audit(1758914982.485:1439): avc: denied { create } for pid=6409 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.353296][ T6403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.486602][ T6403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.690268][ T4563] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.218618][ T272] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.237324][ T4587] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.255567][ T4587] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.445633][ T29] audit: type=1400 audit(1758914983.645:1440): avc: denied { name_bind } for pid=6443 comm="syz.6.842" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 91.542178][ T6447] loop2: detected capacity change from 0 to 128 [ 92.401325][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 92.623345][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 92.862515][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 92.941404][ T6486] loop2: detected capacity change from 0 to 1024 [ 93.236931][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.245285][ T29] audit: type=1400 audit(1758914985.405:1441): avc: denied { mount } for pid=6494 comm="syz.5.862" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.259844][ T6486] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 93.286116][ T6492] netlink: 'syz.0.861': attribute type 13 has an invalid length. [ 93.320374][ T29] audit: type=1400 audit(1758914985.505:1442): avc: denied { unmount } for pid=3646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.452496][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 93.464654][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.543617][ T4598] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.552230][ T4598] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.565667][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 93.584687][ T4598] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.593139][ T4598] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.634253][ T4598] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.642807][ T4598] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.658705][ T4598] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.667215][ T4598] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.012130][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 94.309851][ T6551] netlink: 'syz.6.882': attribute type 4 has an invalid length. [ 94.585501][ T29] audit: type=1400 audit(1758914986.785:1443): avc: denied { create } for pid=6564 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 94.631795][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.890'. [ 94.655388][ T29] audit: type=1400 audit(1758914986.785:1444): avc: denied { bind } for pid=6564 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 94.675966][ T29] audit: type=1400 audit(1758914986.785:1445): avc: denied { listen } for pid=6564 comm="syz.5.888" path=2F3136342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 94.699745][ T29] audit: type=1400 audit(1758914986.785:1446): avc: denied { connect } for pid=6564 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 94.720729][ T29] audit: type=1400 audit(1758914986.785:1447): avc: denied { connectto } for pid=6564 comm="syz.5.888" path=2F3136342FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 94.781247][ T6573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.836677][ T6578] vlan0: entered allmulticast mode [ 94.841895][ T6578] bond2: entered allmulticast mode [ 94.940421][ T29] audit: type=1326 audit(1758914987.115:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.1.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2cdda5d67 code=0x7ffc0000 [ 95.036278][ T6585] syzkaller0: entered promiscuous mode [ 95.041882][ T6585] syzkaller0: entered allmulticast mode [ 95.252663][ T6596] bridge: RTM_NEWNEIGH with invalid ether address [ 95.518641][ T6607] loop2: detected capacity change from 0 to 1024 [ 95.584537][ T6607] EXT4-fs: Ignoring removed orlov option [ 95.590462][ T6607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.744299][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.899537][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.071431][ T6622] $Hÿ: renamed from bond0 (while UP) [ 96.107547][ T6622] $Hÿ: entered promiscuous mode [ 96.112730][ T6622] bond_slave_0: entered promiscuous mode [ 96.118578][ T6622] bond_slave_1: entered promiscuous mode [ 96.126827][ T6625] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20004 [ 96.166685][ T6622] dummy0: entered promiscuous mode [ 96.244429][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 96.244444][ T29] audit: type=1326 audit(1758914988.435:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.341775][ T29] audit: type=1326 audit(1758914988.485:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.365294][ T29] audit: type=1326 audit(1758914988.485:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.388706][ T29] audit: type=1326 audit(1758914988.485:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.412213][ T29] audit: type=1326 audit(1758914988.485:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc0b9d1785 code=0x7ffc0000 [ 96.435821][ T29] audit: type=1326 audit(1758914988.485:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.459315][ T29] audit: type=1326 audit(1758914988.485:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.482923][ T29] audit: type=1326 audit(1758914988.485:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.506540][ T29] audit: type=1326 audit(1758914988.485:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.530099][ T29] audit: type=1326 audit(1758914988.485:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 96.673584][ T6640] loop0: detected capacity change from 0 to 2048 [ 96.866940][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.978586][ T3300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 97.033659][ T3300] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 97.044974][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.919'. [ 97.077989][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.104478][ T6652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.167695][ T6661] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.191090][ T6664] vlan2: entered allmulticast mode [ 97.196322][ T6664] bond0: entered allmulticast mode [ 97.285301][ T6661] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.531957][ T6661] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.597977][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.926'. [ 97.649218][ T6661] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.695981][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 97.817459][ T6686] loop2: detected capacity change from 0 to 512 [ 97.866176][ T6686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.905105][ T4570] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.937070][ T6686] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.945105][ T6686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 97.992044][ T4570] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.032933][ T4570] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.047865][ T6686] System zones: 0-1, 15-15, 18-18, 34-34 [ 98.067502][ T6686] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.077484][ T4570] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.094022][ T6686] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.108613][ T6686] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 98.147063][ T6697] wireguard0: entered promiscuous mode [ 98.152570][ T6697] wireguard0: entered allmulticast mode [ 98.267821][ T6686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.929: bg 0: block 40: padding at end of block bitmap is not set [ 98.284441][ T6686] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 98.293517][ T6686] EXT4-fs (loop2): 1 truncate cleaned up [ 98.300777][ T6686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.395390][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 98.420731][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.451443][ T6708] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.459545][ T6708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 98.470526][ T6703] vlan2: entered allmulticast mode [ 98.475752][ T6703] bond0: entered allmulticast mode [ 98.570390][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.616267][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.941'. [ 98.699466][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 98.751131][ T6734] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20004 [ 98.845040][ T6743] IPv4: Oversized IP packet from 127.202.26.0 [ 98.852728][ T6744] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 98.861182][ T6744] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 98.870438][ T6744] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 98.899020][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 98.899022][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 98.926743][ T6750] pimreg: entered allmulticast mode [ 98.953648][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.963122][ T6750] pimreg: left allmulticast mode [ 98.981886][ T6757] vlan2: entered allmulticast mode [ 98.987043][ T6757] bond1: entered allmulticast mode [ 99.093721][ T6770] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20004 [ 99.223293][ T6781] loop0: detected capacity change from 0 to 512 [ 99.231030][ T6781] EXT4-fs: Ignoring removed bh option [ 99.271742][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.287491][ T6781] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.360130][ T6781] nfs: Unknown parameter '' [ 99.389133][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.426791][ T6799] loop0: detected capacity change from 0 to 128 [ 99.713847][ T6829] wireguard0: entered promiscuous mode [ 99.719491][ T6829] wireguard0: entered allmulticast mode [ 99.906142][ T6849] loop5: detected capacity change from 0 to 512 [ 99.926482][ T6849] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.995: bad orphan inode 11862016 [ 99.962282][ T6849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.991656][ T6849] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.112684][ T6856] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #20: comm syz.5.995: corrupted inode contents [ 100.135851][ T6856] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #20: comm syz.5.995: mark_inode_dirty error [ 100.156074][ T6856] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #20: comm syz.5.995: corrupted inode contents [ 100.171177][ T6856] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #20: comm syz.5.995: mark_inode_dirty error [ 100.205627][ T6856] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #20: comm syz.5.995: mark inode dirty (error -117) [ 100.222550][ T6856] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 100.260961][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.386843][ T6864] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 100.674953][ T6879] loop2: detected capacity change from 0 to 512 [ 100.708900][ T6879] journal_path: Lookup failure for './file0/../file0' [ 100.715732][ T6879] EXT4-fs: error: could not find journal device path [ 100.795091][ T6896] bridge2: entered allmulticast mode [ 100.988788][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.010196][ T6912] vlan2: entered allmulticast mode [ 101.015502][ T6912] bond2: entered allmulticast mode [ 101.475324][ T6919] loop2: detected capacity change from 0 to 128 [ 101.538153][ T6919] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 101.546148][ T6919] FAT-fs (loop2): Filesystem has been set read-only [ 101.579452][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.579452][ T6919] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 101.599178][ T6919] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 101.607063][ T6919] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 101.616897][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.616897][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.630857][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.630857][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.644504][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.644504][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.658654][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.658654][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.672024][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.672024][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.759169][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.759169][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.772600][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.772600][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.845576][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.845576][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.905632][ T6919] syz.2.1020: attempt to access beyond end of device [ 101.905632][ T6919] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.205132][ T6937] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.266704][ T6937] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.338117][ T6937] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.417211][ T6937] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.567664][ T4609] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.595742][ T4609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.622784][ T4609] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644754][ T4609] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.716404][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 102.716420][ T29] audit: type=1400 audit(1758914994.915:1674): avc: denied { create } for pid=6944 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.101638][ T6969] loop2: detected capacity change from 0 to 512 [ 103.111677][ T6969] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.134804][ T6969] EXT4-fs (loop2): 1 truncate cleaned up [ 103.141466][ T6969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.391480][ T6977] loop0: detected capacity change from 0 to 512 [ 103.423121][ T6977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.448704][ T6977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1040: bg 0: block 248: padding at end of block bitmap is not set [ 103.464189][ T6977] Quota error (device loop0): write_blk: dquota write failed [ 103.471877][ T6977] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.481859][ T6977] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1040: Failed to acquire dquot type 1 [ 103.495837][ T6977] EXT4-fs (loop0): 1 truncate cleaned up [ 103.505396][ T6977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.518042][ T6977] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.522543][ T6968] nfs: Unknown parameter '' [ 103.721713][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.763753][ T29] audit: type=1400 audit(1758914995.955:1675): avc: denied { watch } for pid=7001 comm="syz.1.1052" path="/file0" dev="ramfs" ino=15323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 103.790343][ T29] audit: type=1400 audit(1758914995.985:1676): avc: denied { execute } for pid=7001 comm="syz.1.1052" name="file1" dev="ramfs" ino=15322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 103.816003][ T29] audit: type=1400 audit(1758914996.015:1677): avc: denied { execute_no_trans } for pid=7001 comm="syz.1.1052" path="/file1" dev="ramfs" ino=15322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 103.847889][ T7008] wg2: entered promiscuous mode [ 103.852790][ T7008] wg2: entered allmulticast mode [ 103.876985][ T7012] loop2: detected capacity change from 0 to 512 [ 103.887963][ T7012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.899065][ T7012] EXT4-fs (loop2): 1 truncate cleaned up [ 103.905141][ T7012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.926229][ T7017] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.048046][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.079235][ T7024] loop5: detected capacity change from 0 to 512 [ 104.206444][ T7024] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 104.387985][ T7024] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.456109][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1056: iget: bad i_size value: 360287970189639680 [ 104.497085][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1056: couldn't read orphan inode 15 (err -117) [ 104.511059][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.745615][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.769334][ T7035] loop5: detected capacity change from 0 to 512 [ 104.786161][ T7035] EXT4-fs: Ignoring removed orlov option [ 104.797209][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.798269][ T7037] netlink: 'syz.1.1062': attribute type 10 has an invalid length. [ 104.816599][ T7037] __nla_validate_parse: 11 callbacks suppressed [ 104.816675][ T7037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'. [ 104.833036][ T7037] vlan0: entered promiscuous mode [ 104.837257][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.841035][ T7037] vlan0: entered allmulticast mode [ 104.851593][ T7035] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.857196][ T7037] veth0_vlan: entered allmulticast mode [ 104.873062][ T7035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1061: bg 0: block 328: padding at end of block bitmap is not set [ 104.897206][ T29] audit: type=1400 audit(1758914997.095:1678): avc: denied { create } for pid=7034 comm="syz.5.1061" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.945571][ T7037] bridge0: port 3(vlan0) entered blocking state [ 104.953018][ T7037] bridge0: port 3(vlan0) entered disabled state [ 104.975290][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.998107][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 105.012375][ T7037] bridge0: port 3(vlan0) entered blocking state [ 105.018977][ T7037] bridge0: port 3(vlan0) entered forwarding state [ 105.064419][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 105.094745][ T7048] netlink: 'syz.5.1066': attribute type 13 has an invalid length. [ 105.145643][ T29] audit: type=1400 audit(1758914997.325:1679): avc: denied { getopt } for pid=7053 comm="syz.6.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.204893][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.212106][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.302971][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.316133][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.374075][ T7052] tipc: Enabling of bearer rejected, failed to enable media [ 105.395369][ T4586] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.405990][ T4586] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.436136][ T4586] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.457891][ T4586] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.516515][ T29] audit: type=1326 audit(1758914997.715:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 105.576249][ T29] audit: type=1326 audit(1758914997.735:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0b99eec9 code=0x7ffc0000 [ 105.720199][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1079'. [ 105.809268][ T7099] bridge2: port 1(veth0_to_bond) entered blocking state [ 105.816433][ T7099] bridge2: port 1(veth0_to_bond) entered disabled state [ 105.835567][ T7099] veth0_to_bond: entered allmulticast mode [ 105.846194][ T7099] veth0_to_bond: entered promiscuous mode [ 106.367755][ T7121] netlink: 'syz.2.1087': attribute type 26 has an invalid length. [ 107.000728][ T7135] netlink: 'syz.6.1092': attribute type 9 has an invalid length. [ 107.368956][ T7145] netlink: 'syz.6.1095': attribute type 10 has an invalid length. [ 107.391664][ T7145] $Hÿ: (slave dummy0): Releasing backup interface [ 107.410044][ T7145] dummy0: left promiscuous mode [ 107.419622][ T7149] netlink: 'syz.6.1095': attribute type 10 has an invalid length. [ 107.420181][ T7145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.436316][ T7147] loop2: detected capacity change from 0 to 512 [ 107.442802][ T7145] team0: Failed to send options change via netlink (err -105) [ 107.450377][ T7145] team0: Port device dummy0 added [ 107.458436][ T7147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1096: error while reading EA inode 32 err=-116 [ 107.473960][ T7147] EXT4-fs (loop2): Remounting filesystem read-only [ 107.480592][ T7147] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 107.490852][ T7147] EXT4-fs (loop2): 1 orphan inode deleted [ 107.497339][ T7147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.513636][ T7147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.523556][ T7149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.540438][ T7149] team0: Failed to send options change via netlink (err -105) [ 107.548767][ T7149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.557845][ T7149] team0: Port device dummy0 removed [ 107.564769][ T7149] dummy0: entered promiscuous mode [ 107.571373][ T7149] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 107.580358][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 107.873983][ T7178] loop2: detected capacity change from 0 to 512 [ 107.891329][ T7178] EXT4-fs: Ignoring removed bh option [ 107.950021][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.962918][ T7178] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.070843][ T7178] nfs: Unknown parameter '' [ 108.085058][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 108.085073][ T29] audit: type=1400 audit(1758915000.275:1747): avc: denied { setopt } for pid=7182 comm="syz.5.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.146876][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.185162][ T7189] loop2: detected capacity change from 0 to 512 [ 108.232995][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.246327][ T7189] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.262096][ T7189] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1111'. [ 108.313839][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.445435][ T7198] loop2: detected capacity change from 0 to 256 [ 108.462640][ T7198] FAT-fs (loop2): bogus number of FAT sectors [ 108.470160][ T7198] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.371003][ T7228] $Hÿ: renamed from bond0 [ 109.382476][ T7228] $Hÿ: entered promiscuous mode [ 109.387553][ T7228] bond_slave_0: entered promiscuous mode [ 109.393285][ T7228] bond_slave_1: entered promiscuous mode [ 110.149630][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 110.406517][ T7253] loop0: detected capacity change from 0 to 512 [ 110.413082][ T7253] journal_path: Lookup failure for './file0/../file0' [ 110.419899][ T7253] EXT4-fs: error: could not find journal device path [ 110.449210][ T7256] loop5: detected capacity change from 0 to 512 [ 110.458380][ T7257] SELinux: Context @æšæÉ is not valid (left unmapped). [ 110.477186][ T7256] EXT4-fs: Ignoring removed bh option [ 110.524163][ T7257] loop2: detected capacity change from 0 to 4096 [ 110.536559][ T7256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.557576][ T7257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.575255][ T29] audit: type=1400 audit(1758915002.755:1748): avc: denied { create } for pid=7255 comm="syz.2.1144" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=40E69AE6C9 [ 110.597454][ T29] audit: type=1400 audit(1758915002.755:1749): avc: denied { associate } for pid=7255 comm="syz.2.1144" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=40E69AE6C9 [ 110.620848][ T29] audit: type=1400 audit(1758915002.755:1750): avc: denied { mounton } for pid=7255 comm="syz.2.1144" path="/225/file0" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=40E69AE6C9 [ 110.655289][ T7256] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.732718][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.751093][ T7262] nfs: Unknown parameter '' [ 110.814005][ T29] audit: type=1400 audit(1758915002.875:1751): avc: denied { rename } for pid=7255 comm="syz.2.1144" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=40E69AE6C9 [ 110.868566][ T29] audit: type=1400 audit(1758915003.035:1752): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=40E69AE6C9 [ 110.900445][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 111.185861][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.210620][ T7282] netlink: 'syz.5.1140': attribute type 4 has an invalid length. [ 111.545981][ T7296] loop5: detected capacity change from 0 to 512 [ 111.565448][ T7296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.596562][ T7296] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.717487][ T29] audit: type=1326 audit(1758915003.905:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 111.740943][ T29] audit: type=1326 audit(1758915003.905:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 111.764381][ T29] audit: type=1326 audit(1758915003.905:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 111.787891][ T29] audit: type=1326 audit(1758915003.905:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 111.842774][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.549062][ T7335] netlink: 'syz.0.1160': attribute type 13 has an invalid length. [ 112.614971][ T7343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.624819][ T7343] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1162'. [ 113.273809][ T7359] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 113.278591][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 113.278610][ T29] audit: type=1326 audit(1758915005.465:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.288013][ T7359] bond3: entered promiscuous mode [ 113.316875][ T7359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.355560][ T29] audit: type=1326 audit(1758915005.505:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.379202][ T29] audit: type=1326 audit(1758915005.505:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.402695][ T29] audit: type=1326 audit(1758915005.505:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.426122][ T29] audit: type=1326 audit(1758915005.505:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.443438][ T7359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.449634][ T29] audit: type=1326 audit(1758915005.505:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.479802][ T29] audit: type=1326 audit(1758915005.505:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.491933][ T7359] bond3: (slave bond4): making interface the new active one [ 113.503777][ T29] audit: type=1326 audit(1758915005.505:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.510661][ T7359] bond4: entered promiscuous mode [ 113.512434][ T7359] bond3: (slave bond4): Enslaving as an active interface with an up link [ 113.534090][ T29] audit: type=1326 audit(1758915005.505:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.542344][ T7362] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.547608][ T29] audit: type=1326 audit(1758915005.505:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7fc00000 [ 113.570971][ T7362] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 113.796591][ T7369] lo: entered allmulticast mode [ 113.829326][ T7375] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 113.877015][ T7375] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 113.884870][ T7368] lo: left allmulticast mode [ 113.926116][ T7377] bridge0: port 3(gretap0) entered blocking state [ 113.932659][ T7377] bridge0: port 3(gretap0) entered disabled state [ 113.952768][ T7377] gretap0: entered allmulticast mode [ 113.974575][ T7377] gretap0: entered promiscuous mode [ 114.065868][ T7387] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 114.116605][ T7389] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 114.130607][ T7389] dummy0: entered promiscuous mode [ 114.145758][ T7389] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 114.220709][ T7387] $Hÿ: (slave dummy0): Releasing backup interface [ 114.269432][ T7387] dummy0: left promiscuous mode [ 114.286839][ T7387] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.315346][ T7387] team0: Failed to send options change via netlink (err -105) [ 114.322893][ T7387] team0: Port device dummy0 added [ 114.418262][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1184'. [ 114.466278][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 114.523074][ T7393] bridge0: port 3(geneve0) entered blocking state [ 114.529756][ T7393] bridge0: port 3(geneve0) entered disabled state [ 114.549370][ T7393] geneve0: entered allmulticast mode [ 114.561401][ T7393] geneve0: entered promiscuous mode [ 115.518570][ T7425] netlink: 'syz.1.1190': attribute type 13 has an invalid length. [ 115.637302][ T7425] bridge0: port 3(vlan0) entered disabled state [ 115.643806][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.650963][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.678033][ T7436] nfs: Unknown parameter '' [ 115.871342][ T4602] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.905964][ T4602] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.941210][ T4602] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.962917][ T4602] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.963155][ T7442] loop5: detected capacity change from 0 to 1024 [ 116.009207][ T7442] EXT4-fs: Ignoring removed bh option [ 116.035581][ T7442] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.082589][ T7442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.098496][ T7431] raw_sendmsg: syz.2.1193 forgot to set AF_INET. Fix it! [ 116.113442][ T7442] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1196: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 116.134276][ T7442] EXT4-fs (loop5): Remounting filesystem read-only [ 116.152731][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.529362][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1205'. [ 116.538474][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1205'. [ 116.683983][ T7475] loop0: detected capacity change from 0 to 512 [ 116.815065][ T7475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.835502][ T7475] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.870743][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 116.968251][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.229922][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 117.247648][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 117.751298][ T7536] ./file0: Can't lookup blockdev [ 117.798123][ T7540] loop2: detected capacity change from 0 to 512 [ 117.805712][ T7540] EXT4-fs: Ignoring removed bh option [ 117.891507][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.956884][ T7540] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.107089][ T7540] nfs: Unknown parameter '' [ 118.182705][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.276388][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 118.276404][ T29] audit: type=1400 audit(1758915010.475:1999): avc: denied { remove_name } for pid=7546 comm="syz.2.1230" name="file0" dev="cgroup2" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 118.751968][ T29] audit: type=1326 audit(1758915010.945:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.785682][ T29] audit: type=1326 audit(1758915010.945:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.809262][ T29] audit: type=1326 audit(1758915010.945:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.832820][ T29] audit: type=1326 audit(1758915010.945:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.856256][ T29] audit: type=1326 audit(1758915010.945:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.879671][ T29] audit: type=1326 audit(1758915010.945:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.903097][ T29] audit: type=1326 audit(1758915010.945:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.926596][ T29] audit: type=1326 audit(1758915010.945:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 118.950057][ T29] audit: type=1326 audit(1758915010.945:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5398bbeec9 code=0x7ffc0000 [ 119.018557][ T7563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.026981][ T7569] bridge_slave_0: left allmulticast mode [ 119.032688][ T7569] bridge_slave_0: left promiscuous mode [ 119.038464][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.064411][ T7569] bridge_slave_1: left allmulticast mode [ 119.070293][ T7569] bridge_slave_1: left promiscuous mode [ 119.076050][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.086486][ T7569] bond0: (slave bond_slave_0): Releasing backup interface [ 119.094945][ T7569] bond0: (slave bond_slave_1): Releasing backup interface [ 119.104502][ T7569] team0: Port device team_slave_0 removed [ 119.111215][ T7581] nfs: Unknown parameter '' [ 119.111635][ T7569] team0: Port device team_slave_1 removed [ 119.123242][ T7569] geneve0: left allmulticast mode [ 119.128365][ T7569] geneve0: left promiscuous mode [ 119.133459][ T7569] bridge0: port 3(geneve0) entered disabled state [ 119.150920][ T7580] netlink: 'syz.1.1243': attribute type 13 has an invalid length. [ 119.168820][ T7580] gretap0: refused to change device tx_queue_len [ 119.176571][ T7580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.218652][ T7584] loop0: detected capacity change from 0 to 512 [ 119.267434][ T7584] EXT4-fs (loop0): failed to initialize system zone (-117) [ 119.274704][ T7584] EXT4-fs (loop0): mount failed [ 119.623278][ T7584] Set syz1 is full, maxelem 65536 reached [ 119.852708][ T7608] netlink: 'syz.0.1253': attribute type 13 has an invalid length. [ 119.975035][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 121.146815][ T7646] loop5: detected capacity change from 0 to 256 [ 121.185452][ T7646] FAT-fs (loop5): IO charset maccenteuro not found [ 121.391210][ T7651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1268'. [ 121.433014][ T7651] futex_wake_op: syz.0.1268 tries to shift op by -1; fix this program [ 122.064677][ T7661] bond_slave_1: mtu less than device minimum [ 122.175261][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 122.229469][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 122.273493][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 122.324415][ T7669] netlink: 'syz.2.1276': attribute type 13 has an invalid length. [ 122.358831][ T7669] gretap0: refused to change device tx_queue_len [ 122.374433][ T7669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.486868][ T7675] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.541914][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 122.602208][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 123.135270][ T3379] IPVS: starting estimator thread 0... [ 123.226348][ T7712] IPVS: using max 2064 ests per chain, 103200 per kthread [ 123.293590][ T7718] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1294'. [ 123.366928][ T7722] sit0: entered promiscuous mode [ 123.372556][ T7722] sit0: entered allmulticast mode [ 123.413186][ T7724] smc: net device bond0 applied user defined pnetid SYZ0 [ 123.432503][ T7724] smc: net device bond0 erased user defined pnetid SYZ0 [ 123.475247][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 123.475266][ T29] audit: type=1326 audit(1758915015.665:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.516118][ T29] audit: type=1326 audit(1758915015.675:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.539611][ T29] audit: type=1326 audit(1758915015.705:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.563159][ T29] audit: type=1326 audit(1758915015.705:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.586636][ T29] audit: type=1326 audit(1758915015.715:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.610104][ T29] audit: type=1326 audit(1758915015.715:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.663761][ T29] audit: type=1326 audit(1758915015.715:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.687365][ T29] audit: type=1400 audit(1758915015.765:2542): avc: denied { create } for pid=7728 comm="syz.5.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.706836][ T29] audit: type=1326 audit(1758915015.835:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc6b501785 code=0x7ffc0000 [ 123.730264][ T29] audit: type=1326 audit(1758915015.835:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b4ceec9 code=0x7ffc0000 [ 123.897128][ T7740] netlink: 'syz.1.1303': attribute type 83 has an invalid length. [ 124.398106][ T7770] $Hÿ: (slave dummy0): Releasing backup interface [ 124.405037][ T7770] dummy0: left promiscuous mode [ 124.417324][ T7770] bridge_slave_0: left allmulticast mode [ 124.423203][ T7770] bridge_slave_0: left promiscuous mode [ 124.429020][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.442862][ T7770] bridge_slave_1: left allmulticast mode [ 124.448653][ T7770] bridge_slave_1: left promiscuous mode [ 124.454455][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.463668][ T7770] veth0_to_bond: left allmulticast mode [ 124.469326][ T7770] veth0_to_bond: left promiscuous mode [ 124.474973][ T7770] bridge2: port 1(veth0_to_bond) entered disabled state [ 124.483965][ T7770] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 124.491604][ T7770] bond_slave_0: left promiscuous mode [ 124.506705][ T7770] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 124.514419][ T7770] bond_slave_1: left promiscuous mode [ 124.545897][ T7770] team0: Port device team_slave_0 removed [ 124.569562][ T7770] team0: Port device team_slave_1 removed [ 124.577739][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.585219][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.593767][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.601292][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.641618][ T7770] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 124.648856][ T7770] batman_adv: batadv0: Removing interface: veth1_vlan [ 124.736901][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1311'. [ 124.827886][ T7755] chnl_net:caif_netlink_parms(): no params data found [ 124.957600][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.964701][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.032409][ T7755] bridge_slave_0: entered allmulticast mode [ 125.064020][ T7755] bridge_slave_0: entered promiscuous mode [ 125.084365][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.091671][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.114149][ T7755] bridge_slave_1: entered allmulticast mode [ 125.128285][ T7755] bridge_slave_1: entered promiscuous mode [ 125.186487][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.234228][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.468012][ T4605] .` (unregistering): Released all slaves [ 125.477267][ T4605] bond1 (unregistering): Released all slaves [ 125.492243][ T4605] bond0 (unregistering): Released all slaves [ 125.507628][ T4605] bond2 (unregistering): Released all slaves [ 125.519699][ T4605] bond3 (unregistering): (slave bond4): Releasing backup interface [ 125.535310][ T4605] bond4 (unregistering): left promiscuous mode [ 125.546970][ T4605] bond3 (unregistering): Released all slaves [ 125.556312][ T4605] bond4 (unregistering): Released all slaves [ 125.588011][ T7755] team0: Port device team_slave_0 added [ 125.608172][ T7755] team0: Port device team_slave_1 added [ 125.633009][ T4605] tipc: Left network mode [ 125.653299][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.660454][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.686485][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.745961][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.752947][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.778928][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.896236][ T7755] hsr_slave_0: entered promiscuous mode [ 125.905838][ T7755] hsr_slave_1: entered promiscuous mode [ 125.918092][ T7755] debugfs: 'hsr0' already exists in 'hsr' [ 125.923857][ T7755] Cannot create hsr debugfs directory [ 126.060312][ T4605] hsr_slave_0: left promiscuous mode [ 126.069517][ T4605] hsr_slave_1: left promiscuous mode [ 126.318692][ T7755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 126.410248][ T7755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.428833][ T7755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.448130][ T7755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.594501][ T7830] loop2: detected capacity change from 0 to 2048 [ 126.635725][ T7830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.650228][ T7830] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.669373][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.678130][ T7830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.678712][ T4605] IPVS: stop unused estimator thread 0... [ 126.701343][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.738361][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.745531][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.774549][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.781742][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.834569][ T7755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.845007][ T7755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.926218][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.955121][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1331'. [ 127.074024][ T7755] veth0_vlan: entered promiscuous mode [ 127.085078][ T7755] veth1_vlan: entered promiscuous mode [ 127.110697][ T7755] veth0_macvtap: entered promiscuous mode [ 127.118979][ T7755] veth1_macvtap: entered promiscuous mode [ 127.129328][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.137996][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.150410][ T4600] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.161898][ T4600] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.172424][ T7872] SELinux: failed to load policy [ 127.174478][ T4600] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.195563][ T4600] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.373836][ T7887] tipc: Started in network mode [ 127.378871][ T7887] tipc: Node identity da48bca2084a, cluster identity 4711 [ 127.386289][ T7887] tipc: Enabled bearer , priority 0 [ 127.395829][ T7886] tipc: Resetting bearer [ 127.462240][ T7886] tipc: Disabling bearer [ 127.537069][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'. [ 127.547139][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1350'. [ 127.582820][ T7909] loop5: detected capacity change from 0 to 1024 [ 127.590222][ T7909] EXT4-fs: Ignoring removed bh option [ 127.596536][ T7909] EXT4-fs: inline encryption not supported [ 127.602779][ T7909] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.615719][ T7909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 127.622866][ T7914] SELinux: security_context_str_to_sid () failed with errno=-22 [ 127.633128][ T7909] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1351: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.648745][ T7909] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1351: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.664588][ T7909] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1351: Failed to acquire dquot type 0 [ 127.679517][ T7909] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 127.689803][ T7909] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1351: mark_inode_dirty error [ 127.701413][ T7909] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.714906][ T7909] EXT4-fs (loop5): 1 orphan inode deleted [ 127.722985][ T7909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.735693][ T4582] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.751098][ T4582] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 0 [ 128.481298][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.501946][ T3646] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.525693][ T3646] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 128.544339][ T3646] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 128.570125][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 128.570144][ T29] audit: type=1400 audit(1758915020.765:2680): avc: denied { create } for pid=7951 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.620518][ T29] audit: type=1400 audit(1758915020.765:2681): avc: denied { setopt } for pid=7951 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.677026][ T29] audit: type=1400 audit(1758915020.875:2682): avc: denied { create } for pid=7953 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.719119][ T29] audit: type=1400 audit(1758915020.905:2683): avc: denied { read } for pid=7951 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.861851][ T29] audit: type=1400 audit(1758915021.055:2684): avc: denied { ioctl } for pid=7969 comm="syz.2.1373" path="socket:[21909]" dev="sockfs" ino=21909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.984784][ T7986] tipc: Started in network mode [ 128.989781][ T7986] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 128.998733][ T7986] tipc: Enabling of bearer rejected, failed to enable media [ 129.012945][ T29] audit: type=1400 audit(1758915021.205:2685): avc: denied { write } for pid=7982 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 129.090695][ T7986] loop5: detected capacity change from 0 to 2048 [ 129.136102][ T7986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.204400][ T29] audit: type=1326 audit(1758915021.395:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9b86eec9 code=0x7ffc0000 [ 129.257137][ T29] audit: type=1326 audit(1758915021.395:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa9b86eec9 code=0x7ffc0000 [ 129.280641][ T29] audit: type=1326 audit(1758915021.395:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9b86eec9 code=0x7ffc0000 [ 129.304125][ T29] audit: type=1326 audit(1758915021.395:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa9b86eec9 code=0x7ffc0000 [ 129.329202][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.376999][ T7993] netlink: 'syz.1.1379': attribute type 4 has an invalid length. [ 129.378678][ T7995] tipc: Started in network mode [ 129.389719][ T7995] tipc: Node identity 96f78cfb55fe, cluster identity 4711 [ 129.396946][ T7995] tipc: Enabled bearer , priority 0 [ 129.410733][ T7995] tipc: Disabling bearer [ 130.241308][ T8014] netlink: 'syz.5.1387': attribute type 4 has an invalid length. [ 130.259391][ T8014] netlink: 'syz.5.1387': attribute type 4 has an invalid length. [ 130.270950][ T8010] tipc: Enabling of bearer rejected, failed to enable media [ 130.430424][ T8017] netlink: 'syz.5.1388': attribute type 10 has an invalid length. [ 130.441235][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1388'. [ 130.454950][ T8019] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 130.512481][ T8023] netlink: 'syz.5.1391': attribute type 12 has an invalid length. [ 130.692475][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 131.805375][ T8046] syzkaller0: entered promiscuous mode [ 131.810876][ T8046] syzkaller0: entered allmulticast mode [ 132.075747][ T8062] netlink: 'syz.7.1407': attribute type 26 has an invalid length. [ 132.239558][ T8073] loop2: detected capacity change from 0 to 512 [ 132.247151][ T8073] EXT4-fs: Ignoring removed bh option [ 132.252929][ T8073] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.266937][ T8073] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1411: bg 0: block 4: invalid block bitmap [ 132.279710][ T8073] EXT4-fs (loop2): 1 truncate cleaned up [ 132.286485][ T8073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.321610][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.440083][ T8089] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 132.459331][ T8089] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 132.867499][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 132.900622][ T8116] loop5: detected capacity change from 0 to 512 [ 132.910373][ T8116] EXT4-fs: Ignoring removed nobh option [ 132.953726][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1427: corrupted inode contents [ 132.968932][ T8116] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1427: mark_inode_dirty error [ 132.998318][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1427: corrupted inode contents [ 133.022165][ T8126] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1430'. [ 133.040812][ T8116] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1427: mark_inode_dirty error [ 133.066360][ T8116] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1427: Failed to acquire dquot type 0 [ 133.109132][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1427: corrupted inode contents [ 133.129470][ T8116] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1427: mark_inode_dirty error [ 133.143795][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1427: corrupted inode contents [ 133.158735][ T8116] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1427: mark_inode_dirty error [ 133.176384][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1427: corrupted inode contents [ 133.204850][ T8116] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 133.218408][ T8116] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1427: corrupted inode contents [ 133.232697][ T8116] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1427: mark_inode_dirty error [ 133.246693][ T8116] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 133.260651][ T8116] EXT4-fs (loop5): 1 truncate cleaned up [ 133.270975][ T8116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.291929][ T8116] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.325991][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.382025][ T8135] loop5: detected capacity change from 0 to 1024 [ 133.389048][ T8135] EXT4-fs: Ignoring removed bh option [ 133.394473][ T8135] EXT4-fs: inline encryption not supported [ 133.401460][ T8135] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.412586][ T8135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 133.421695][ T8135] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1434: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.435955][ T8135] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1434: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.451747][ T8135] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1434: Failed to acquire dquot type 0 [ 133.465268][ T8135] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 133.474959][ T8135] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1434: mark_inode_dirty error [ 133.487175][ T8135] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 133.497554][ T8135] EXT4-fs (loop5): 1 orphan inode deleted [ 133.503762][ T8135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.516622][ T4582] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.553773][ T4582] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 0 [ 133.567853][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.581213][ T8141] loop7: detected capacity change from 0 to 512 [ 133.588532][ T3646] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 133.603705][ T3646] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 133.615053][ T3646] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 133.618124][ T8141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.680691][ T8141] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.706811][ T8141] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.1435'. [ 133.728749][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.801550][ T8157] syzkaller0: entered promiscuous mode [ 133.807207][ T8157] syzkaller0: entered allmulticast mode [ 133.970964][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 133.971035][ T29] audit: type=1400 audit(1758915026.165:2843): avc: denied { bind } for pid=8160 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.998977][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 134.012065][ T29] audit: type=1400 audit(1758915026.195:2844): avc: denied { setopt } for pid=8160 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.246506][ T8165] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 134.253056][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.260762][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 134.339422][ T8166] vhci_hcd: connection closed [ 134.339637][ T4605] vhci_hcd: stop threads [ 134.348675][ T4605] vhci_hcd: release socket [ 134.353099][ T4605] vhci_hcd: disconnect device [ 134.527268][ T29] audit: type=1400 audit(1758915026.725:2845): avc: denied { mount } for pid=8175 comm="syz.6.1449" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 134.553119][ T29] audit: type=1400 audit(1758915026.745:2846): avc: denied { search } for pid=8175 comm="syz.6.1449" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.586749][ T29] audit: type=1400 audit(1758915026.785:2847): avc: denied { search } for pid=8175 comm="syz.6.1449" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.608835][ T29] audit: type=1400 audit(1758915026.785:2848): avc: denied { read open } for pid=8175 comm="syz.6.1449" path="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.653534][ T29] audit: type=1400 audit(1758915026.845:2849): avc: denied { read write } for pid=8179 comm="syz.2.1451" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.692937][ T29] audit: type=1400 audit(1758915026.845:2850): avc: denied { open } for pid=8179 comm="syz.2.1451" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.727262][ T29] audit: type=1400 audit(1758915026.925:2851): avc: denied { create } for pid=8181 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.748107][ T29] audit: type=1400 audit(1758915026.945:2852): avc: denied { bind } for pid=8181 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.859757][ T8192] netlink: 'syz.2.1456': attribute type 10 has an invalid length. [ 134.904762][ T8192] netlink: 'syz.2.1456': attribute type 10 has an invalid length. [ 134.935985][ T8192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.998469][ T8204] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 135.054676][ T8204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.061619][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1462'. [ 135.184674][ T8208] bond1 (unregistering): Released all slaves [ 135.315044][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 135.560074][ T8242] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 135.628463][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1477'. [ 135.639019][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1477'. [ 135.655495][ T8247] hsr_slave_0 (unregistering): left promiscuous mode [ 136.372010][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1495'. [ 136.543648][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.552200][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.576720][ T8306] netlink: 'syz.5.1499': attribute type 10 has an invalid length. [ 136.591481][ T8306] team0: Port device dummy0 removed [ 136.622944][ T8306] dummy0: entered promiscuous mode [ 136.644797][ T8306] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 136.971515][ T8324] tipc: Enabled bearer , priority 0 [ 136.979285][ T8324] syzkaller0: entered promiscuous mode [ 136.984895][ T8324] syzkaller0: entered allmulticast mode [ 136.995292][ T8324] tipc: Resetting bearer [ 137.001843][ T8323] tipc: Resetting bearer [ 137.009810][ T8323] tipc: Disabling bearer [ 137.770950][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1515'. [ 137.860421][ T8360] loop7: detected capacity change from 0 to 8192 [ 137.915382][ T8360] loop7: p1 p2[DM] p4 [ 137.919646][ T8360] loop7: p1 size 196608 extends beyond EOD, truncated [ 137.927921][ T8360] loop7: p2 start 4292936063 is beyond EOD, truncated [ 137.934768][ T8360] loop7: p4 size 50331648 extends beyond EOD, truncated [ 137.948892][ T8360] openvswitch: netlink: Message has 6 unknown bytes. [ 138.778214][ T8365] loop7: detected capacity change from 0 to 512 [ 138.994017][ T8365] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 139.009089][ T8365] EXT4-fs (loop7): 1 truncate cleaned up [ 139.016272][ T8365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.117006][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 139.117093][ T29] audit: type=1400 audit(1758915031.315:2889): avc: denied { write } for pid=8368 comm="syz.6.1521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.148013][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1526'. [ 139.158124][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1525'. [ 139.176455][ T29] audit: type=1400 audit(1758915031.315:2890): avc: denied { add_name } for pid=8364 comm="syz.7.1522" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.197262][ T29] audit: type=1400 audit(1758915031.315:2891): avc: denied { create } for pid=8364 comm="syz.7.1522" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.199884][ T8365] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #15: comm syz.7.1522: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 139.217551][ T29] audit: type=1400 audit(1758915031.315:2892): avc: denied { read write } for pid=8364 comm="syz.7.1522" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.217588][ T29] audit: type=1400 audit(1758915031.315:2893): avc: denied { open } for pid=8364 comm="syz.7.1522" path="/27/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.282160][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.292263][ T29] audit: type=1400 audit(1758915031.395:2894): avc: denied { ioctl } for pid=8364 comm="syz.7.1522" path="/27/bus/file1" dev="loop7" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.342591][ T8388] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1528'. [ 139.384553][ T29] audit: type=1400 audit(1758915031.575:2895): avc: denied { ioctl } for pid=8391 comm="syz.7.1527" path="socket:[22490]" dev="sockfs" ino=22490 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.444857][ T8396] netlink: 'syz.7.1531': attribute type 4 has an invalid length. [ 139.458742][ T8396] netlink: 'syz.7.1531': attribute type 4 has an invalid length. [ 139.486987][ T8402] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 139.500112][ T29] audit: type=1326 audit(1758915031.695:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 139.523270][ T8402] bond0: (slave dummy0): Releasing backup interface [ 139.540778][ T8405] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 139.551891][ T29] audit: type=1326 audit(1758915031.715:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 139.574684][ T29] audit: type=1326 audit(1758915031.715:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 139.599395][ T8405] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.652351][ T8400] loop5: detected capacity change from 0 to 1024 [ 139.665039][ T8400] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1534: Failed to acquire dquot type 0 [ 139.686912][ T8400] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 139.705026][ T8400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1534: corrupted inode contents [ 139.722742][ T8400] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.1534: mark_inode_dirty error [ 139.736857][ T8400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1534: corrupted inode contents [ 139.750187][ T8400] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.1534: mark_inode_dirty error [ 139.763301][ T8400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1534: corrupted inode contents [ 139.801094][ T8400] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 139.829290][ T8400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1534: corrupted inode contents [ 139.851132][ T8400] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.1534: mark_inode_dirty error [ 139.866258][ T8400] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 139.888570][ T8400] EXT4-fs (loop5): 1 truncate cleaned up [ 139.898738][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 139.925883][ T8400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.972569][ T8400] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1534: Failed to acquire dquot type 0 [ 139.975076][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 140.041157][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.073791][ T8431] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 140.082819][ T8432] netlink: 'syz.5.1546': attribute type 4 has an invalid length. [ 140.089389][ T8434] bridge0: port 1(gretap0) entered blocking state [ 140.097208][ T8434] bridge0: port 1(gretap0) entered disabled state [ 140.104426][ T8434] gretap0: entered allmulticast mode [ 140.112444][ T8434] gretap0: entered promiscuous mode [ 140.119216][ T8431] $Hÿ: (slave dummy0): Releasing backup interface [ 140.133041][ T8431] dummy0: left promiscuous mode [ 140.139184][ T8435] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 140.147298][ T8436] netlink: 'syz.5.1546': attribute type 4 has an invalid length. [ 140.160748][ T8435] dummy0: entered promiscuous mode [ 140.167371][ T8435] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 140.354825][ T8442] bridge0: port 1(geneve0) entered blocking state [ 140.361436][ T8442] bridge0: port 1(geneve0) entered disabled state [ 140.368769][ T8442] geneve0: entered allmulticast mode [ 140.374698][ T8442] geneve0: entered promiscuous mode [ 140.381766][ T8442] bridge0: port 1(geneve0) entered blocking state [ 140.388233][ T8442] bridge0: port 1(geneve0) entered forwarding state [ 140.673643][ T8460] syzkaller0: entered promiscuous mode [ 140.679387][ T8460] syzkaller0: entered allmulticast mode [ 141.056331][ T8478] loop7: detected capacity change from 0 to 256 [ 141.194632][ T8482] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.258435][ T8482] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.416306][ T8482] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.529974][ T8482] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.637095][ T4592] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.690342][ T4592] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.729007][ T4592] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.762824][ T4592] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.905629][ T8496] loop2: detected capacity change from 0 to 128 [ 142.024836][ T8504] netlink: 'syz.7.1572': attribute type 10 has an invalid length. [ 142.043438][ T8504] team0: Port device dummy0 added [ 142.054406][ T8504] netlink: 'syz.7.1572': attribute type 10 has an invalid length. [ 142.063062][ T8504] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.074924][ T8504] team0: Failed to send options change via netlink (err -105) [ 142.083635][ T8504] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.093817][ T8504] team0: Port device dummy0 removed [ 142.102392][ T8504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.180038][ T8507] bio_check_eod: 1801 callbacks suppressed [ 142.180068][ T8507] syz.2.1570: attempt to access beyond end of device [ 142.180068][ T8507] loop2: rw=2049, sector=129, nr_sectors = 128 limit=128 [ 142.200173][ T8505] syz.2.1570: attempt to access beyond end of device [ 142.200173][ T8505] loop2: rw=2049, sector=721, nr_sectors = 8 limit=128 [ 142.380491][ T8515] loop7: detected capacity change from 0 to 512 [ 142.393356][ T8515] EXT4-fs: Ignoring removed i_version option [ 142.399464][ T8515] EXT4-fs: Ignoring removed bh option [ 142.418955][ T8515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.436132][ T8515] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.477230][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.593016][ T8525] netlink: 'syz.7.1577': attribute type 1 has an invalid length. [ 142.600923][ T8525] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1577'. [ 142.672263][ T8531] loop7: detected capacity change from 0 to 512 [ 142.702730][ T8531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.720840][ T8531] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.823148][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'. [ 142.861919][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.876284][ T8539] loop5: detected capacity change from 0 to 512 [ 142.883758][ T8539] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 142.911538][ T4600] kworker/u8:47: attempt to access beyond end of device [ 142.911538][ T4600] loop2: rw=1, sector=257, nr_sectors = 464 limit=128 [ 143.083508][ T8547] loop2: detected capacity change from 0 to 512 [ 143.091107][ T8547] EXT4-fs: Ignoring removed i_version option [ 143.097198][ T8547] EXT4-fs: Ignoring removed bh option [ 143.108928][ T8554] netlink: 'syz.6.1584': attribute type 10 has an invalid length. [ 143.118917][ T8554] team0: Port device dummy0 added [ 143.128143][ T8554] netlink: 'syz.6.1584': attribute type 10 has an invalid length. [ 143.136477][ T8554] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.174743][ T8547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.187750][ T8547] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.196079][ T8554] team0: Failed to send options change via netlink (err -105) [ 143.207119][ T8554] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.216703][ T8554] team0: Port device dummy0 removed [ 143.223893][ T8554] dummy0: entered promiscuous mode [ 143.229391][ T8554] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 143.252572][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.355480][ T8565] loop5: detected capacity change from 0 to 512 [ 143.408537][ T8563] syzkaller0: entered promiscuous mode [ 143.414068][ T8563] syzkaller0: entered allmulticast mode [ 143.450668][ T8565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.463323][ T8565] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.624770][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1592'. [ 143.704168][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 143.919249][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 145.002028][ T8608] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.112709][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.128261][ T8608] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.146949][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1607'. [ 145.160117][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 145.160135][ T29] audit: type=1326 audit(1758915037.355:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.199592][ T29] audit: type=1326 audit(1758915037.355:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.223121][ T29] audit: type=1326 audit(1758915037.355:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.246867][ T29] audit: type=1326 audit(1758915037.355:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.270352][ T29] audit: type=1326 audit(1758915037.355:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.294216][ T29] audit: type=1326 audit(1758915037.355:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.317779][ T29] audit: type=1326 audit(1758915037.355:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.341336][ T29] audit: type=1326 audit(1758915037.355:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.348596][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.364760][ T29] audit: type=1326 audit(1758915037.355:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.394899][ T29] audit: type=1326 audit(1758915037.355:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 145.419822][ T8620] $Hÿ: (slave dummy0): Releasing backup interface [ 145.427704][ T8620] dummy0: left promiscuous mode [ 145.433574][ T8620] bridge_slave_0: left allmulticast mode [ 145.439266][ T8620] bridge_slave_0: left promiscuous mode [ 145.445048][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.454064][ T8620] bridge_slave_1: left allmulticast mode [ 145.459775][ T8620] bridge_slave_1: left promiscuous mode [ 145.465593][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.474430][ T8620] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 145.481867][ T8620] bond_slave_0: left promiscuous mode [ 145.489086][ T8620] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 145.497703][ T8620] bond_slave_1: left promiscuous mode [ 145.504306][ T8620] bridge0: port 3(vlan0) entered disabled state [ 145.516241][ T8608] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.558011][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1610'. [ 145.587132][ T8608] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.987315][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.995827][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.039002][ T4610] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.083075][ T4610] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.131056][ T4610] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.163859][ T4610] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.239367][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1616'. [ 146.307592][ T8648] loop5: detected capacity change from 0 to 256 [ 146.597574][ T8659] loop2: detected capacity change from 0 to 512 [ 146.644134][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.656954][ T8659] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.417576][ T8675] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1635'. [ 147.434015][ T8675] futex_wake_op: syz.1.1635 tries to shift op by -1; fix this program [ 147.535660][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.556943][ T8679] gretap0: left allmulticast mode [ 147.562073][ T8679] gretap0: left promiscuous mode [ 147.567222][ T8679] bridge0: port 3(gretap0) entered disabled state [ 147.586121][ T8679] $Hÿ: (slave dummy0): Releasing backup interface [ 147.593177][ T8679] dummy0: left promiscuous mode [ 147.608007][ T8679] bridge_slave_0: left allmulticast mode [ 147.613762][ T8679] bridge_slave_0: left promiscuous mode [ 147.619623][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.627604][ T8679] bridge_slave_1: left allmulticast mode [ 147.633313][ T8679] bridge_slave_1: left promiscuous mode [ 147.639114][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.648492][ T8679] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 147.655951][ T8679] bond_slave_0: left promiscuous mode [ 147.662337][ T8679] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 147.670103][ T8679] bond_slave_1: left promiscuous mode [ 147.676835][ T8679] team0: Port device team_slave_1 removed [ 147.682804][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.691024][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.206187][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.321928][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1630'. [ 148.525989][ T8705] loop7: detected capacity change from 0 to 764 [ 148.786693][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 148.911397][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 149.083770][ T8719] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.333664][ T8725] loop7: detected capacity change from 0 to 512 [ 149.487303][ T8725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.500106][ T8725] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.402697][ T8740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.425899][ T8740] $Hÿ: (slave dummy0): Releasing backup interface [ 150.433255][ T8740] dummy0: left promiscuous mode [ 150.459366][ T8740] geneve0: left allmulticast mode [ 150.464509][ T8740] geneve0: left promiscuous mode [ 150.469671][ T8740] bridge0: port 1(geneve0) entered disabled state [ 150.508360][ T8743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1646'. [ 150.761611][ T8750] loop2: detected capacity change from 0 to 512 [ 150.777720][ T8750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 150.797089][ T8750] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.806816][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.822173][ T8750] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 150.837955][ T8750] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 150.845020][ T8750] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.1650: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 150.871137][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 150.871152][ T29] audit: type=1326 audit(1758915043.065:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 150.900841][ T29] audit: type=1326 audit(1758915043.065:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 150.924354][ T29] audit: type=1326 audit(1758915043.065:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 150.955924][ T29] audit: type=1326 audit(1758915043.065:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 150.957909][ T8750] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1650: couldn't read orphan inode 13 (err -117) [ 150.979450][ T29] audit: type=1326 audit(1758915043.065:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.014684][ T29] audit: type=1326 audit(1758915043.065:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.038196][ T29] audit: type=1326 audit(1758915043.065:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.061642][ T29] audit: type=1326 audit(1758915043.065:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.076756][ T8759] sit0: entered promiscuous mode [ 151.085274][ T29] audit: type=1326 audit(1758915043.065:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.085352][ T29] audit: type=1326 audit(1758915043.075:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fafeec9 code=0x7ffc0000 [ 151.086709][ T8755] netlink: 'syz.6.1652': attribute type 83 has an invalid length. [ 151.090565][ T8759] sit0: entered allmulticast mode [ 151.156924][ T8750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.376345][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.399438][ T8775] loop5: detected capacity change from 0 to 128 [ 151.659755][ T8775] syz.5.1668: attempt to access beyond end of device [ 151.659755][ T8775] loop5: rw=2049, sector=721, nr_sectors = 8 limit=128 [ 151.686265][ T8775] syz.5.1668: attempt to access beyond end of device [ 151.686265][ T8775] loop5: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 151.764872][ T4610] kworker/u8:57: attempt to access beyond end of device [ 151.764872][ T4610] loop5: rw=1, sector=345, nr_sectors = 376 limit=128 [ 151.790807][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 151.811858][ T8791] loop5: detected capacity change from 0 to 2048 [ 151.833897][ T8791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.850096][ T8791] syz_tun: entered allmulticast mode [ 151.867687][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.917820][ T8795] pim6reg1: entered promiscuous mode [ 151.923188][ T8795] pim6reg1: entered allmulticast mode [ 152.427797][ T8816] loop5: detected capacity change from 0 to 764 [ 152.459217][ T8817] tipc: Enabling of bearer rejected, failed to enable media [ 152.504606][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 153.119599][ T8830] SELinux: failed to load policy [ 153.404576][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 153.515099][ T8852] tipc: Enabled bearer , priority 0 [ 153.551479][ T8848] tipc: Resetting bearer [ 153.575680][ T8848] tipc: Disabling bearer [ 154.515457][ T8880] loop7: detected capacity change from 0 to 512 [ 155.287833][ T8880] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 155.347185][ T8880] EXT4-fs (loop7): orphan cleanup on readonly fs [ 155.356688][ T8880] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 155.373908][ T8880] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 155.380955][ T8880] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.1695: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 155.403378][ T8880] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1695: couldn't read orphan inode 13 (err -117) [ 155.505952][ T8880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.605588][ T8892] netlink: 'syz.5.1699': attribute type 4 has an invalid length. [ 155.633124][ T8892] netlink: 'syz.5.1699': attribute type 4 has an invalid length. [ 156.057942][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.078754][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 156.078778][ T29] audit: type=1326 audit(1758915048.275:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2cdda5d67 code=0x7ffc0000 [ 156.108758][ T29] audit: type=1326 audit(1758915048.275:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2cdd4af79 code=0x7ffc0000 [ 156.132196][ T29] audit: type=1326 audit(1758915048.275:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2cdda5d67 code=0x7ffc0000 [ 156.155654][ T29] audit: type=1326 audit(1758915048.275:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2cdd4af79 code=0x7ffc0000 [ 156.179614][ T29] audit: type=1326 audit(1758915048.275:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.203140][ T29] audit: type=1326 audit(1758915048.275:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.226665][ T29] audit: type=1326 audit(1758915048.275:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.250161][ T29] audit: type=1326 audit(1758915048.275:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.567306][ T29] audit: type=1326 audit(1758915048.275:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.590906][ T29] audit: type=1326 audit(1758915048.485:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe2cddaeec9 code=0x7ffc0000 [ 156.768638][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1709'. [ 157.362470][ T8934] loop5: detected capacity change from 0 to 512 [ 157.501796][ T8934] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 157.524463][ T8934] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.540610][ T8934] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 157.574968][ T8942] loop2: detected capacity change from 0 to 512 [ 157.586675][ T8942] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.614863][ T8943] loop7: detected capacity change from 0 to 256 [ 157.669842][ T8943] FAT-fs (loop7): IO charset maccenteuro not found [ 158.761091][ T57] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.778006][ T57] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.798295][ T57] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.809104][ T57] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.849884][ T8934] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 158.859975][ T8934] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.1716: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 158.879973][ T8934] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1716: couldn't read orphan inode 13 (err -117) [ 158.893100][ T8934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.068096][ T8983] loop7: detected capacity change from 0 to 2048 [ 159.081441][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.093790][ T8983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.106718][ T8983] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.195685][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 159.215086][ T8983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.285341][ T8998] netlink: 'syz.7.1736': attribute type 4 has an invalid length. [ 159.297237][ T8998] netlink: 'syz.7.1736': attribute type 4 has an invalid length. [ 160.285018][ T7076] IPVS: starting estimator thread 0... [ 160.319891][ T9009] loop2: detected capacity change from 0 to 1024 [ 160.357011][ T9009] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.367994][ T9009] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.385277][ T9006] IPVS: using max 2448 ests per chain, 122400 per kthread [ 160.401328][ T9013] netlink: 'syz.7.1744': attribute type 5 has an invalid length. [ 160.410010][ T9009] JBD2: no valid journal superblock found [ 160.415863][ T9009] EXT4-fs (loop2): Could not load journal inode [ 160.693075][ T9009] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 161.835175][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 161.841344][ T29] audit: type=1400 audit(1758915054.025:3680): avc: denied { create } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.866821][ T29] audit: type=1400 audit(1758915054.055:3681): avc: denied { connect } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.886357][ T29] audit: type=1400 audit(1758915054.055:3682): avc: denied { setopt } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.905793][ T29] audit: type=1400 audit(1758915054.055:3683): avc: denied { bind } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.925013][ T29] audit: type=1400 audit(1758915054.055:3684): avc: denied { write } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.986571][ T9037] loop5: detected capacity change from 0 to 2048 [ 161.994065][ T29] audit: type=1400 audit(1758915054.145:3685): avc: denied { read } for pid=9029 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.013549][ T29] audit: type=1400 audit(1758915054.145:3686): avc: denied { block_suspend } for pid=9031 comm="syz.7.1752" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.063368][ T9037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.204814][ T29] audit: type=1400 audit(1758915054.395:3687): avc: denied { add_name } for pid=9036 comm="syz.5.1754" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.225592][ T29] audit: type=1400 audit(1758915054.395:3688): avc: denied { create } for pid=9036 comm="syz.5.1754" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.635214][ T29] audit: type=1400 audit(1758915054.595:3689): avc: denied { read write } for pid=9036 comm="syz.5.1754" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.929709][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.007059][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 163.319542][ T9066] loop2: detected capacity change from 0 to 512 [ 163.327945][ T9066] EXT4-fs: Ignoring removed nobh option [ 163.352804][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1763: corrupted inode contents [ 163.367446][ T9066] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1763: mark_inode_dirty error [ 163.383323][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1763: corrupted inode contents [ 163.397036][ T9066] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1763: mark_inode_dirty error [ 163.410664][ T9066] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1763: Failed to acquire dquot type 0 [ 163.429393][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1763: corrupted inode contents [ 163.444946][ T9066] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1763: mark_inode_dirty error [ 163.460096][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1763: corrupted inode contents [ 163.473410][ T9066] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1763: mark_inode_dirty error [ 163.487257][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1763: corrupted inode contents [ 163.501506][ T9066] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 163.513719][ T9066] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1763: corrupted inode contents [ 163.533224][ T9066] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1763: mark_inode_dirty error [ 163.550824][ T9066] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 163.574554][ T9066] EXT4-fs (loop2): 1 truncate cleaned up [ 163.609020][ T9066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.630887][ T9066] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.674702][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.801658][ T9079] loop7: detected capacity change from 0 to 1024 [ 163.809702][ T9079] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.820695][ T9079] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.833738][ T9079] JBD2: no valid journal superblock found [ 163.839590][ T9079] EXT4-fs (loop7): Could not load journal inode [ 163.856724][ T9079] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 164.485050][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1780'. [ 165.107688][ T9129] loop2: detected capacity change from 0 to 512 [ 165.114454][ T9129] EXT4-fs: Ignoring removed nobh option [ 165.173211][ T9135] netlink: 'syz.2.1789': attribute type 5 has an invalid length. [ 166.341578][ T9161] loop7: detected capacity change from 0 to 512 [ 166.366910][ T9161] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 166.407201][ T9161] EXT4-fs (loop7): 1 truncate cleaned up [ 166.415565][ T9161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.528612][ T9172] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 166.535177][ T9172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.542824][ T9172] vhci_hcd vhci_hcd.0: Device attached [ 166.625674][ T9161] ================================================================== [ 166.628524][ T9177] loop5: detected capacity change from 0 to 2048 [ 166.633880][ T9161] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 166.647296][ T9161] [ 166.649633][ T9161] write to 0xffff88810061a54c of 4 bytes by task 9168 on cpu 0: [ 166.657300][ T9161] xas_set_mark+0x12b/0x140 [ 166.657331][ T9161] __folio_start_writeback+0x1dd/0x440 [ 166.657357][ T9161] ext4_bio_write_folio+0x5ad/0x9f0 [ 166.657383][ T9161] mpage_process_page_bufs+0x4a1/0x620 [ 166.657402][ T9161] mpage_prepare_extent_to_map+0x786/0xc00 [ 166.657421][ T9161] ext4_do_writepages+0xa05/0x2750 [ 166.657466][ T9161] ext4_writepages+0x176/0x300 [ 166.657484][ T9161] do_writepages+0x1c6/0x310 [ 166.657508][ T9161] file_write_and_wait_range+0x156/0x2c0 [ 166.657539][ T9161] generic_buffers_fsync_noflush+0x45/0x120 [ 166.657562][ T9161] ext4_sync_file+0x1ab/0x690 [ 166.657578][ T9161] vfs_fsync_range+0x10d/0x130 [ 166.657599][ T9161] ext4_buffered_write_iter+0x34f/0x3c0 [ 166.657630][ T9161] ext4_file_write_iter+0xdbf/0xf00 [ 166.657660][ T9161] iter_file_splice_write+0x663/0xa60 [ 166.657678][ T9161] direct_splice_actor+0x153/0x2a0 [ 166.657696][ T9161] splice_direct_to_actor+0x30f/0x680 [ 166.657714][ T9161] do_splice_direct+0xda/0x150 [ 166.657732][ T9161] do_sendfile+0x380/0x650 [ 166.657759][ T9161] __x64_sys_sendfile64+0x105/0x150 [ 166.657786][ T9161] x64_sys_call+0x2bb0/0x2ff0 [ 166.657806][ T9161] do_syscall_64+0xd2/0x200 [ 166.657835][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.657855][ T9161] [ 166.657861][ T9161] read to 0xffff88810061a54c of 4 bytes by task 9161 on cpu 1: [ 166.657876][ T9161] xas_find_marked+0x5dc/0x620 [ 166.657905][ T9161] find_get_entry+0x5d/0x380 [ 166.657921][ T9161] filemap_get_folios_tag+0x92/0x210 [ 166.657939][ T9161] mpage_prepare_extent_to_map+0x320/0xc00 [ 166.657960][ T9161] ext4_do_writepages+0xa05/0x2750 [ 166.657988][ T9161] ext4_writepages+0x176/0x300 [ 166.658007][ T9161] do_writepages+0x1c6/0x310 [ 166.658030][ T9161] filemap_write_and_wait_range+0x144/0x340 [ 166.658062][ T9161] ext4_file_write_iter+0xe04/0xf00 [ 166.658093][ T9161] iter_file_splice_write+0x663/0xa60 [ 166.658111][ T9161] direct_splice_actor+0x153/0x2a0 [ 166.658129][ T9161] splice_direct_to_actor+0x30f/0x680 [ 166.658148][ T9161] do_splice_direct+0xda/0x150 [ 166.658165][ T9161] do_sendfile+0x380/0x650 [ 166.658193][ T9161] __x64_sys_sendfile64+0x105/0x150 [ 166.658219][ T9161] x64_sys_call+0x2bb0/0x2ff0 [ 166.658239][ T9161] do_syscall_64+0xd2/0x200 [ 166.658268][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.658293][ T9161] [ 166.658297][ T9161] value changed: 0x0a000021 -> 0x04000021 [ 166.658307][ T9161] [ 166.658310][ T9161] Reported by Kernel Concurrency Sanitizer on: [ 166.658347][ T9161] CPU: 1 UID: 0 PID: 9161 Comm: syz.7.1799 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.658375][ T9161] Tainted: [W]=WARN [ 166.658381][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.658393][ T9161] ================================================================== [ 166.696700][ T9177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.696884][ T9177] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.697493][ T9177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.786890][ T7075] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 167.069033][ T9173] vhci_hcd: connection reset by peer [ 167.092711][ T31] vhci_hcd: stop threads [ 167.097049][ T31] vhci_hcd: release socket [ 167.101521][ T31] vhci_hcd: disconnect device [ 167.323145][ T7755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.845200][ T7075] usb 5-1: enqueue for inactive port 0 [ 171.850717][ T7075] usb 5-1: enqueue for inactive port 0 [ 171.925274][ T7075] vhci_hcd: vhci_device speed not set